changing the Access-Control-Allow-Origin to allow Jquery load() to work

Question

SITUATION:

• Internal web site running off a web server.
• SharePoint running off a different internal web server.
• It's all internal, and all on the same company.com internal domain (different sub domains because they are accessed via SharePoint.company.com and internalWeb.company.com)

PROBLEM:

• XMLHttpRequest cannot load http://SharePoint.company.com. Origin http://internalWeb.company.com is not allowed by Access-Control-Allow-Origin.

WHAT I WANT:

• Use ajax and the JQuery load() function from my web sites running off the web server to call urls on the SharePoint server.

NOTE:

• This seems like it should be possible to set the SharePoint server to allow cross origin requests by just setting the Access-Control-Allow-Origin, it's ALL INTERNAL and I can change the web.configs or IIS settings as I please
• Is this possible? If so, where do I set it. I have read a lot on this and can't seem to get a clear answer.

CODE: (on my web page running on internalWeb.company.com)

$("#details").load("SharePoint.company.com/someDetails.html");

Thanks!

Answer 1

A quick fix could be to set a custom header in your SharePoint web.config:

http://www.iis.net/configreference/system.webserver/httpprotocol/customheaders

<customHeaders>
    <add name="Access-Control-Allow-Origin" value="*" />
</customHeaders>

Or for just that domain, try

<customHeaders>
    <add name="Access-Control-Allow-Origin" value="http://internalWeb.company.com" />
</customHeaders>