Can JavaScript load XML data from a third-party domain?

Question

Can JavaScript load an RSS XML feed from Yahoo?

Is client-side JS allowed to access 3rd-party domains?

Answer 1

You can use the technique outlined in my blog post Unwritten guide to Yahoo Query Langauge

You would query the XML data table with a yql statment like this:

select * from xml
  where url="http://path/to/xml

Then you would add a script tag to your html (can be done with document.createElement('script')) with a src http://query.yahooapis.com/v1/public/yql?q={your yql here}&format=json&callback={your function here} where {your yql here} is replace with a URI Encoded version of you yql statment.

Answer 2

An easy way to do this is to proxy the request through the server that your page resides on. Steps are:

1. Write a server side script performs an http request on the rss feed, when that script itself is request (i.e. via get or post)
2. Use ajax to request the server side script, or just call it from the main script for that page.
3. The server side script then returns the feed source in some displayable form.
4. Profit!

On IE 8 and FF 3.1(not certain), it is possible to make these requests through specialized cross site calls, but the last generation of browsers will still cause problems. See:

http://dannythorpe.com/2009/01/15/ie8-cross-domain-request-support-demo/ http://ejohn.org/blog/cross-site-xmlhttprequest/ Feature is restricted in FF 3.0, unclear if it will be back in 3.1

However, the steps above are guaranteed not to run afoul of any browser CSS security, at the expense of some lag and extra hw load on your server.