Re: SOAP requests between domains

Eugene Prokopiev wrote:


> I need to allow SOAP requests from XUL to another domain as described in 
> http://lxr.mozilla.org/mozilla/source/extensions/webservices/docs/New_Security_Model.html 
> 
> 
> XUL page is located at http://localhost/xul/hello-soap/HelloWorld.xul
> 
> SOAP service is located at http://localhost:8080/axis/HelloWorld.jws
> 
> File http://localhost:8080/axis/web-scripts-access.xml looks like:
> 
> <wsa:webScriptAccess>
>     <wsa:allow type="soapv" from="http://localhost:8080/"/>
> </wsa:webScriptAccess>

If you want localhost to access your service on localhost:8080 then I 
think you need to allow
   <wsa:allow type="soapv" from="http://localhost/"/>

> On SOAP request I get the next error message:
> 
> A script from "http://localhost" was denied from UniversalBrowserRead 
> privileges

Is your script trying to call
netscape.security.PrivilegeManager.enablePrivilege('UniversalBrowserRead')
then? You don't need to do that, indeed you can only do that 
successfully in local pages (file: URL) or signed pages with the normal 
security settings.


-- 

	Martin Honnen
	http://JavaScript.FAQTs.com/