----- Original Message ----- > From: "Matthew Gertner" <matt...@salsitasoft.com> > To: dev-platform@lists.mozilla.org > Sent: Friday, February 22, 2013 7:02:40 AM > Subject: Accessing @mozilla.org/xmlextras/xmlhttprequest;1 from content > > I have an extension that loads an HTML file into a hidden <browser> > and runs script in the context of the hidden browser window. That > script needs to be able to make crossdomain XHR requests to > chrome:// and resource:// URLs that are apparently now blocked in > Firefox 19 (they weren't blocked in Firefox 18).
I believe that the Addon SDK (a.k.a. JetPack) has special provisions for this; See [1], section "Content Scripts." In particular, I think that if you inject a "content script" into the <browser> then the "content script" will be able to make cross-origin requests like you propose. At least, I know that the Addon SDK required an extension to the nsIPrincipal interface to support multi-origin principals for this case. I am particularly interested if this strategy would work for you and other addon developers. Cheers, Brian [1] https://addons.mozilla.org/en-US/developers/docs/sdk/1.12/dev-guide/guides/xul-migration.html _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform