Slash Boxes
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

jjohn (22)

  (email not shown publicly)
AOL IM: taskboy3000 (Add Buddy, Send Message)

Perl hack/Linux buff/OSS junkie.

Journal of jjohn (22)

Monday April 18, 2005
01:32 PM

XMLHttpRequest and cross-scripting hyjinx

[ #24262 ]

This is a quick note to myself, but perhaps others tortured with javascript will appreciate it. It is possible to make HTTP requests in javascript (with modern browsers). This takes the form of the XMLHttpRequest object. How you get to that object is somewhat system-dependent.

Once you have that object, your Mozilla browser may restrict you in the URLs you can fetch. In particular, you can only open() URLs from the same host that you fetched the page making the request. So a page on isn't going to open "" but instead emit an exception that will be reported in the js console.

Code hounds will enjoy this mess that reports the content of a page as a JS alert. The getURL() function expects to be passed in a URL (weird) and uses that crazy JS compiler directive voodoo that make IE happy.

function getURL(u) {
  // from
  var xmlhttp=false;
  /*@cc_on @*/
  /*@if (@_jscript_version >= 5)
  // JScript gives us Conditional compilation, we can cope with old IE versions.
  // and security blocked creation of the objects.
  try {
    xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
  } catch (e) {
     try {
       xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
     } catch (e) {
       xmlhttp = false;
  @end @*/

  if (!xmlhttp && typeof XMLHttpRequest!='undefined') {
    xmlhttp = new XMLHttpRequest();

  alert("Opening " + u);
  try {"GET", u, true);
  } catch (e) {
     alert("Oops " + e);
     return false;
  // prepare the call back (weird to do this after open)
  xmlhttp.onreadystatechange=function() {
                                          // page load done
                                          if (xmlhttp.readyState==4) {
                                              alert("Got: " + xmlhttp.responseText);


The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
More | Login | Reply
Loading... please wait.