anandaverma / google-chrome-apps

google chrome extensions and apps
Apache License 2.0
2 stars 2 forks source link

Allowing Cross-Origin XMLHttpRequest #15

Closed anandaverma closed 10 years ago

anandaverma commented 10 years ago

Regular web pages can use the XMLHttpRequest object to send and receive data from remote servers, but they're limited by the same origin policy. Extensions aren't so limited. An extension can talk to remote servers outside of its origin, as long as it first requests cross-origin permissions.

add hosts or host match patterns to the permissions section of the manifest file, the extension can request access to remote servers outside of its origin.