Marc_

Here's my predicament:

We are running an intranet page that needs to hit two intranet servers, http://jupiter/ and http://neptune/. The master page is on jupiter, which is a J2EE environment. This page needs to make another AJAX-like HTTP request when a button is clicked to pull info from neptune, which is an IIS/ASP environment.

Making the request to neptune inside the jupiter page causes an annoying message: This page is accessing information that is not under its control. This poses a security risk. Do you want to continue

Why am I being prompted like this, and how do I resolve this



Re: Internet Explorer Web Development Cross-site/Cross-platform Data Access on Intranet Dilemma

EricLaw-MSFT

See http://en.wikipedia.org/wiki/Same_origin_policy for background. If you must, use Tools/Internet Options/Security/Intranet/Custom to enable "Access data sources across domains"



Re: Internet Explorer Web Development Cross-site/Cross-platform Data Access on Intranet Dilemma

Marc_

Thanks for the feedback, Eric. Your suggestion to modify the security setting does indeed work; however, I am surprised that it considers two separate intranet sites as different domains. Both of my intranet sites are located on the same domain controller, so I assumed they would follow the same policy as Internet sites on different subdomains (http://msdn2.microsoft.com/en-us/library/ms533028.aspx). Apparently, intranet sites do not follow this policy (or else I'm misinterpreting the documentation and implementing it incorrectly).

I eventually just completely scrapped my Ajax-like idea and brought in a bigger gun¡ªmy own custom automation object! Basically, I just built the automation object to do the exact same thing that the asp page was doing, and I load the automation object from my J2EE page. Then we just deploy the automation object via active directory on our LAN. It's not exactly an elegant solution, but at least it gets around these annoying security dialogs. :-)

I appreciate your input, Eric. IE7 is excellent and you should be proud of it. Keep up the good work!