- IE8 and above:
- use XDomainRequest instead
- Can only cross from HTTP to HTTP or HTTPS to HTTPS (i.e. if web page is served from HTTP, then cannot cross-site access HTTPS. Or web page served over SSL cannot cross site access HTTP content. Will get "Access Denied" error.)
- Cross site request server must send this response header: Access-Control-Allow-Orig
*