Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
CSSHttpRequest is cross-domain AJAX using CSS as a transport
JavaScript Ruby Python PHP
Branch: master

Fetching latest commit…

Cannot retrieve the latest commit at this time

Failed to load latest commit information.
examples
lib
test
.gitignore
CHANGES
COPYING
README.markdown
Rakefile
VERSION.yml
__init__.py
csshttprequest.gemspec
csshttprequest.js
csshttprequest.min.js
csshttprequest.php
csshttprequest.py
test-all

README.markdown

CSSHttpRequest is cross-domain AJAX using CSS.

Please see the latest info at http://nb.io/hacks/csshttprequest/

Like JavaScript includes, this works because CSS is not subject to the same-origin policy that affects XMLHttpRequest. CSSHttpRequest functions similarly to JSONP, and is limited to making GET requests. Unlike JSONP, untrusted third-party JavaScript cannot execute in the context of the calling page.

The transport encodes the payload in the background-image property:

#c0 { background: url(data:,Hello%20World!); }

This version has been tested in cross-domain contexts in Safari 3.x, Firefox 3.x and Internet Explorer 6.

Something went wrong with that request. Please try again.