I mentioned in a recent post that I was considering writing an article entitled Using Javascript, XMLHttpRequest and RSS to create an MSN Spaces photo album browser. It actually took less work than I thought to build a webpage that allows you to browse the photo albums in a particular person's Space or from a randomly chosen Space. 

I haven't used Javascript in about 5 years but it didn't take much to put the page together thanks mostly to the wealth of information available on the Web.

You can find the page at http://www.25hoursaday.com/spaces/photobrowser.html 

The page requires Javascript and currently only works in Internet Explorer but I'm sure that some intrepid soul could make it work in Firefox in a couple of minutes. If you can, please send me whatever changes are necessary.  


Monday, April 25, 2005 1:15:37 AM (GMT Daylight Time, UTC+01:00)
For your script to open a URL from a different host (spaces.msn.com) in Firefox, you would have to get the script signed and request the appropriate privileges. See the last paragraph of http://jibbering.com/2002/4/httprequest.html and http://www.mozilla.org/xmlextras/#Documentation .
Monday, April 25, 2005 3:35:35 AM (GMT Daylight Time, UTC+01:00)
Hmmm....I get a javascript error icon in the bottom-left of IE. Double-clicking it reveals a permission denied message. Something related to the javascript code. Anyone else getting this?
John Walker
Monday, April 25, 2005 9:52:12 AM (GMT Daylight Time, UTC+01:00)
I get the same permission denied error.

It's in the function:

function getRssFeed(url)

On the req.onreadstatechange

It appears to be activex permissions, adding 25hoursaday.com to my trusted zone (temporarily!) allowed it to work.

It appears to be tied to the same issue that firefox has, you have to enable access data sources accross domains to get it to work. (in Miscellaneous in the security settings)
Tuesday, April 26, 2005 5:03:06 PM (GMT Daylight Time, UTC+01:00)
Looks good (I clicked OK on a security warning).

For cross-browser XMLHttpRequest support Jim Ley's bit of script worked for me in a vaguely similar project (good notes there too):


Thursday, April 28, 2005 8:50:08 PM (GMT Daylight Time, UTC+01:00)
"Ajax's" biggest current limitation is that it doesn't work across domains (unless you actively enable domains, which is a non-starter).

I don't totally understand what the security issue is on why this limitation must be in place.

I would like to be able to develop apps that are self-contained in one HTML file, including the JavaScript, that can run locallyon a PC.

It seems to me this should be possible.
Comments are closed.