Usando XMLHttpRequest
BaselineWidely available *
This feature is well established and works across many devices and browser versions. It’s been available across browsers since July 2015.
* Some parts of this feature may have varying levels of support.
XMLHttpRequest
torna o envio de requisições HTTP muito fácil. Basta criar uma instância do objeto, abrir uma url e enviar uma requisição. OstatusHTTPdo resultado assim como o seu conteúdo estarão disponíveis quando a transação for completada. Esta página descreve alguns casos comuns de uso desse poderoso objeto JavaScript.
function reqListener() { console.log(this.responseText);}var oReq = new XMLHttpRequest();oReq.onload = reqListener;oReq.open("get", "yourFile.txt", true);oReq.send();
Tipos de Requisições
Uma requisição feita via XMLHttpRequest pode buscar dados de duas maneiras, sícrona e assíncrona. O tipo de requisição é dado pelo argumentoasync
que é opcional (terceiro argumento) e é definido no método XMLHttpRequestopen(). Se esse argumento fortrue
ou não especificado, oXMLHttpRequest
será processado de maneira assíncrona, caso contrário o processamento será síncrono. Uma discussão detalhada e demonstrações desses dois tipos podem ser encontradas na páginarequisições síncronas e assíncronas. No geral a melhor prática é a das solicitações assíncronas.
Manipulando Respostas
Existem vários tipos deatributos de resposta definidos pela especificação da W3C para o XMLHttpRequest. Eles informam ao cliente que efetuou a requisição XMLHttpRequest informações importantes sobre o status da resposta. Em alguns casos onde se lida com tipos de resposa de não-texto, os tipos de resposta podem envolver alguma manipulação e/ou análise conforme descrito nas seções seguintes.
Analisando e manipulando a propriedaderesponseXML
Se você utiliza oXMLHttpRequest
para obter o conteúdo de um documento XML remoto, a propriedaderesponseXML
será um objeto DOM que contém um documento XML, o que pode dificultar a manipulação e análise.
As cinco formas mais utilizadas para análisar e manipular um arquivo XML são:
- UsandoXPath para análisar parte deles.
- UsandoJXON para converter em um Objeto JavaScript.
- ManualmenteParsing and serializing XML para strings ou objetos.
- UsandoXMLSerializer para serializarárvores do DOM para strings ou para arquivos.
- RegExppode ser usado se você souber de antemão qual é o conteúdo do XML. Você pode remover quebras de linhas, usando a RegExp para procurar as quebras de linha. No entanto, este é o "último método", caso o código do XML sofra alterações, o método se torna falho.
Analisando e manipulando uma propriedaderesponseText
contendo um documento HTML
Nota:A especificação W3C doXMLHttpRequest permite analisar HTML através da propriedadeXMLHttpRequest.responseXML
. Leia o artigo sobreHTML in XMLHttpRequest para maiores detalhes.
Se você usa oXMLHttpRequest
para recuperar o conteúdo de uma página HTML remota, a propriedaderesponseText
será uma string contendo um a "sopa" de todos as tags HTML, o que pode ser difícil de manipular e analizar. Existem três formas básicas para analizar esta sopa de string HTML:
- Use a propriedade
XMLHttpRequest.responseXML
. - Introduza o conteúdo dentro do corpo de umdocument fragment Através de
fragment.body.innerHTML
e percorra o fragmento do DOM. - RegExp pode se usada se você sempre conhece o conteúdo HTML
responseText
de que tem em mãos. Você pode quere remover quebras de linha, se você usar RegExp para varrer no que diz respeito a quebra de linhas. Contudo, este método é um "último recurso" uma vez que se o código HTML mudar um pouco, o método provavelmente irá falhar.
Manipulação de dados binários
Apesar deXMLHttpRequest
ser mais comumente usado para enviar e receber dados textual, ele pode ser utilizado para enviar e receber conteúdo binário. Existem vários métodos bem testados para forçar a resposta de um XMLHttpRequest para o envio de dados binário. Eles envolvem a utilização do método .overrideMimeType() sobre o objeto XMLHttpRequest e é uma solução viável.
var oReq = new XMLHttpRequest();oReq.open("GET", url, true);// recupera dados não processados como uma string bináriaoReq.overrideMimeType("text/plain; charset=x-user-defined");/* ... */
A especificação XMLHttpRequest Level 2 adiciona novoresponseType attributes que tornam o envio e recebimento de dados muito mais fácil.
var oReq = new XMLHttpRequest();oReq.open("GET", url, true);oReq.responseType = "arraybuffer";oReq.onload = function (e) { var arraybuffer = oReq.response; // não é responseText /* ... */};oReq.send();
Para mais exemplos confira a páginaSending and Receiving Binary Data.
Monitorando o progresso
XMLHttpRequest
fornece a capacidade de ouvir vários eventos que podem ocorrer enquanto o pedido está sendo processado. Isso inclui notificações periódicas de progresso, notificações de erro e assim por diante.
Suporte para evento de progresso DOM monitorando a conexãoXMLHttpRequest
transfers siga a Web APIspecification for progress events: estes eventos implementam a interfaceProgressEvent
.
var oReq = new XMLHttpRequest();oReq.addEventListener("progress", updateProgress, false);oReq.addEventListener("load", transferComplete, false);oReq.addEventListener("error", transferFailed, false);oReq.addEventListener("abort", transferCanceled, false);oReq.open();// ...A transferência foi cancelada pelo usuário// progresso de transferências do servidor para o cliente (downloads)function updateProgress(oEvent) { if (oEvent.lengthComputable) { var percentComplete = oEvent.loaded / oEvent.total; // ... } else { // Não é possível calcular informações de progresso uma vez que a dimensão total é desconhecida }}function transferComplete(evt) { alert("A transferência foi concluída.");}function transferFailed(evt) { alert("Um erro ocorreu durante a transferência do arquivo.");}function transferCanceled(evt) { alert("A transferência foi cancelada pelo usuário.");}
Lines 3-6 adiciona receptores de eventos (event listeners) para os vários que são enviados ao executar uma transferência de dados usandoXMLHttpRequest
.
Nota:Você precisa adicionar os receptores de eventos (event listeners) antes de chamaropen()
sobre a requisição. Caso contrário, os eventos de prograsso não dispararão..
O manipulador de evento de prograsso, especificado pela funçãoupdateProgress()
neste exemplo, recebe o número total de bytes para transferir, bem como o número de bytes transferidos até o momento em total de eventos e campos carregados . No entanto, se o campo lengthComputable é false, o comprimento total não é conhecido e será zero..
Eventos de progresso existem para ambos as transferências de download e upload. The download events are fired on theXMLHttpRequest
object itself, as shown in the above sample. The upload events are fired on theXMLHttpRequest.upload
object, as shown below:
var oReq = new XMLHttpRequest();oReq.upload.addEventListener("progress", updateProgress, false);oReq.upload.addEventListener("load", transferComplete, false);oReq.upload.addEventListener("error", transferFailed, false);oReq.upload.addEventListener("abort", transferCanceled, false);oReq.open();
Nota:eventos de progresso não estão disponíveis para o arquivo:
protocol.
Nota:Atualmente, existem bugs em aberto para o evento de progresso que continua fetando a versão 25 do Firefox sobreOS X eLinux.
Nota:Iniciando no Gecko 9.0, eventos de progresso agora podem ser invocados a entrar para cada pedaço de dados recebidos, incluindo o último bloco, nos casos em que o último pacote é recebido e a conexão fechada antes do evento progresso ser disparado. Neste caso, o evento de progresso é automaticamente acionado quando o evento load ocorre para esse pacote. Isso permite que você agora acompanhe de forma confiável apenas observando o evento de progresso
Nota:A partir do Gecko 12.0, se o seu evento de progresso e chamado com umresponseType
de "moz-blob", o valor da resposta será umBlob
contendo os dados recebidos até agorar.
POde-se também detectar todas as três condições de fim de carga (abort
,load
, orerror
) usando o eventoloadend
:
req.addEventListener("loadend", loadEnd, false);function loadEnd(e) { alert( "A transferência terminou (embora não sabemos se ele conseguiu ou não).", );}
Note que não há nenhuma maneira de ter certeza a partir da informação recebida pelo evento loadend sobre qual condição causou a operação de encerrar; no entanto, você pode usar isso para lidar com tarefas que precisam ser realizadas em todos os cenários de fim-de-transferência.
Submitting forms and uploading files
Instances ofXMLHttpRequest
can be used to submit forms in two ways:
- using nothing butpure AJAX,
- using the
FormData
API.
Thesecond way (using theFormData
API) is the simplest and the fastest, but has the disadvantage thatthe data thus collected can not bestringified: they are in every waya blob. It is the best solution for simple cases.Thefirst way (pure AJAX) is instead the most complex, but in compensation is also the most flexible and powerful: it lends itself to wider uses andthe data thus collected can bestringifiedand reused for other purposes such as, for example, populating thestatus object during amanipulation of the browser history, or other.
Using nothing butpure AJAX
Submitting forms without theFormData
API does not require other APIs, except that, onlyif you want to upload one or more files, theFileReader
API.
A brief introduction to the submit methods
An html<form>
can be sent in four ways:
- using the
POST
method and setting theenctype
attribute toapplication/x-www-form-urlencoded
(default); - using the
POST
method and setting theenctype
attribute totext/plain
; - using the
POST
method and setting theenctype
attribute tomultipart/form-data
; - using the
GET
method (in this case theenctype
attribute will be ignored).
Now, consider to submit a form containing only two fields, namedfoo
andbaz
. If you are using thePOST
method, the server will receive a string similar to one of the following three ones depending on the encoding type you are using:
Method:
POST
; Encoding type:application/x-www-form-urlencoded
(default):Content-Type: application/x-www-form-urlencodedfoo=bar&baz=The+first+line.%0D%0AThe+second+line.%0D%0A
Method:
POST
; Encoding type:text/plain
:Content-Type: text/plainfoo=barbaz=The first line.The second line.
Method:
POST
; Encoding type:multipart/form-data
:Content-Type: multipart/form-data; boundary=---------------------------314911788813839-----------------------------314911788813839Content-Disposition: form-data; name="foo"bar-----------------------------314911788813839Content-Disposition: form-data; name="baz"The first line.The second line.-----------------------------314911788813839--
Instead, if you are using theGET
method, a string like the following will be simply added to the URL:
?foo=bar&baz=The%20first%20line.%0AThe%20second%20line.
A littlevanilla framework
All these things are done automatically by the web browser whenever you submit a<form>
. But if you want to do the same things using JavaScript you have to instruct the interpreter aboutall things. So, how to send forms inpure AJAX is too complex to be explained in detail here. For this reason we posted herea complete (but still didactic) framework, which is able to use all the four ways ofsubmit and, also, toupload files:
<!doctype html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Sending forms with pure AJAX – MDN</title> <script type="text/javascript"> "use strict"; /*\ |*| |*| :: XMLHttpRequest.prototype.sendAsBinary() Polifyll :: |*| |*| https://developer.mozilla.org/pt-BR/docs/DOM/XMLHttpRequest#sendAsBinary() \*/ if (!XMLHttpRequest.prototype.sendAsBinary) { XMLHttpRequest.prototype.sendAsBinary = function (sData) { var nBytes = sData.length, ui8Data = new Uint8Array(nBytes); for (var nIdx = 0; nIdx < nBytes; nIdx++) { ui8Data[nIdx] = sData.charCodeAt(nIdx) & 0xff; } /* send as ArrayBufferView...: */ this.send(ui8Data); /* ...or as ArrayBuffer (legacy)...: this.send(ui8Data.buffer); */ }; } /*\ |*| |*| :: AJAX Form Submit Framework :: |*| |*| https://developer.mozilla.org/pt-BR/docs/DOM/XMLHttpRequest/Using_XMLHttpRequest |*| |*| This framework is released under the GNU Public License, version 3 or later. |*| http://www.gnu.org/licenses/gpl-3.0-standalone.html |*| |*| Syntax: |*| |*| AJAXSubmit(HTMLFormElement); \*/ var AJAXSubmit = (function () { function ajaxSuccess() { /* console.log("AJAXSubmit - Success!"); */ alert(this.responseText); /* you can get the serialized data through the "submittedData" custom property: */ /* alert(JSON.stringify(this.submittedData)); */ } function submitData(oData) { /* the AJAX request... */ var oAjaxReq = new XMLHttpRequest(); oAjaxReq.submittedData = oData; oAjaxReq.onload = ajaxSuccess; if (oData.technique === 0) { /* method is GET */ oAjaxReq.open( "get", oData.receiver.replace( /(?:\?.*)?$/, oData.segments.length > 0 ? "?" + oData.segments.join("&") : "", ), true, ); oAjaxReq.send(null); } else { /* method is POST */ oAjaxReq.open("post", oData.receiver, true); if (oData.technique === 3) { /* enctype is multipart/form-data */ var sBoundary = "---------------------------" + Date.now().toString(16); oAjaxReq.setRequestHeader( "Content-Type", "multipart\/form-data; boundary=" + sBoundary, ); oAjaxReq.sendAsBinary( "--" + sBoundary + "\r\n" + oData.segments.join("--" + sBoundary + "\r\n") + "--" + sBoundary + "--\r\n", ); } else { /* enctype is application/x-www-form-urlencoded or text/plain */ oAjaxReq.setRequestHeader("Content-Type", oData.contentType); oAjaxReq.send( oData.segments.join(oData.technique === 2 ? "\r\n" : "&"), ); } } } function processStatus(oData) { if (oData.status > 0) { return; } /* the form is now totally serialized! do something before sending it to the server... */ /* doSomething(oData); */ /* console.log("AJAXSubmit - The form is now serialized. Submitting..."); */ submitData(oData); } function pushSegment(oFREvt) { this.owner.segments[this.segmentIdx] += oFREvt.target.result + "\r\n"; this.owner.status--; processStatus(this.owner); } function plainEscape(sText) { /* how should I treat a text/plain form encoding? what characters are not allowed? this is what I suppose...: */ /* "4\3\7 - Einstein said E=mc2" ----> "4\\3\\7\ -\ Einstein\ said\ E\=mc2" */ return sText.replace(/[\s\=\\]/g, "\\$&"); } function SubmitRequest(oTarget) { var nFile, sFieldType, oField, oSegmReq, oFile, bIsPost = oTarget.method.toLowerCase() === "post"; /* console.log("AJAXSubmit - Serializing form..."); */ this.contentType = bIsPost && oTarget.enctype ? oTarget.enctype : "application\/x-www-form-urlencoded"; this.technique = bIsPost ? this.contentType === "multipart\/form-data" ? 3 : this.contentType === "text\/plain" ? 2 : 1 : 0; this.receiver = oTarget.action; this.status = 0; this.segments = []; var fFilter = this.technique === 2 ? plainEscape : escape; for (var nItem = 0; nItem < oTarget.elements.length; nItem++) { oField = oTarget.elements[nItem]; if (!oField.hasAttribute("name")) { continue; } sFieldType = oField.nodeName.toUpperCase() === "INPUT" ? oField.getAttribute("type").toUpperCase() : "TEXT"; if (sFieldType === "FILE" && oField.files.length > 0) { if (this.technique === 3) { /* enctype is multipart/form-data */ for (nFile = 0; nFile < oField.files.length; nFile++) { oFile = oField.files[nFile]; oSegmReq = new FileReader(); /* (custom properties:) */ oSegmReq.segmentIdx = this.segments.length; oSegmReq.owner = this; /* (end of custom properties) */ oSegmReq.onload = pushSegment; this.segments.push( 'Content-Disposition: form-data; name="' + oField.name + '"; filename="' + oFile.name + '"\r\nContent-Type: ' + oFile.type + "\r\n\r\n", ); this.status++; oSegmReq.readAsBinaryString(oFile); } } else { /* enctype is application/x-www-form-urlencoded or text/plain or method is GET: files will not be sent! */ for ( nFile = 0; nFile < oField.files.length; this.segments.push( fFilter(oField.name) + "=" + fFilter(oField.files[nFile++].name), ) ); } } else if ( (sFieldType !== "RADIO" && sFieldType !== "CHECKBOX") || oField.checked ) { /* field type is not FILE or is FILE but is empty */ this.segments.push( this.technique === 3 /* enctype is multipart/form-data */ ? 'Content-Disposition: form-data; name="' + oField.name + '"\r\n\r\n' + oField.value + "\r\n" : /* enctype is application/x-www-form-urlencoded or text/plain or method is GET */ fFilter(oField.name) + "=" + fFilter(oField.value), ); } } processStatus(this); } return function (oFormElement) { if (!oFormElement.action) { return; } new SubmitRequest(oFormElement); }; })(); </script> </head> <body> <h1>Sending forms with pure AJAX</h1> <h2>Using the GET method</h2> <form action="register.php" method="get" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Registration example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> <h2>Using the POST method</h2> <h3>Enctype: application/x-www-form-urlencoded (default)</h3> <form action="register.php" method="post" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Registration example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> <h3>Enctype: text/plain</h3> <form action="register.php" method="post" enctype="text/plain" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Registration example</legend> <p>Your name: <input type="text" name="user" /></p> <p> Your message:<br /> <textarea name="message" cols="40" rows="8"></textarea> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> <h3>Enctype: multipart/form-data</h3> <form action="register.php" method="post" enctype="multipart/form-data" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Upload example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /><br /> Sex: <input type="radio" name="sex" value="male" /> <label for="sex_male">Male</label> <input type="radio" name="sex" value="female" /> <label for="sex_female">Female</label><br /> Password: <input type="password" name="secret" /><br /> What do you prefer: <select name="image_type"> <option>Books</option> <option>Cinema</option> <option>TV</option> </select> </p> <p> Post your photos: <input type="file" multiple name="photos[]" /> </p> <p> <input type="checkbox" name="vehicle[]" value="Bike" /> <label for="vehicle_bike">I have a bike</label><br /> <input type="checkbox" name="vehicle[]" value="Car" /> <label for="vehicle_car">I have a car</label> </p> <p> Describe yourself:<br /> <textarea name="description" cols="50" rows="8"></textarea> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> </body></html>
To test it, please, create a page namedregister.php (which is theaction
attribute of these sample forms) and just put the followingminimalistic content:
<?php /* register.php */ header("Content-type: text/plain"); echo ":: data received via GET ::\n\n"; print_r($_GET); echo "\n\n:: Data received via POST ::\n\n"; print_r($_POST); echo "\n\n:: Data received as \"raw\" (text/plain encoding) ::\n\n"; if (isset($HTTP_RAW_POST_DATA)) { echo $HTTP_RAW_POST_DATA; } echo "\n\n:: Files received ::\n\n"; print_r($_FILES);?>
The syntax of this script is the following:
AJAXSubmit(myForm);
Nota:This littlevanilla frameworkuses theFileReader
API, which isa recent technique (but only when there are files to upload, themethod
of the<form>
isPOST
and theenctype
attribute is setted tomultipart/form-data
). For this reason,thepure-AJAX upload is to be considered an experimental technique. Instead, if you don't want to upload files, this framework will not use any recent API.Note also thatthe best way to send binary content is usingArrayBuffers orBlobs in conjuncton with thesend()
method and, possibly, with thereadAsArrayBuffer()
method of theFileReader
API. But, since the aim of this little script is to work with astringifiable raw data, we used thesendAsBinary()
method in conjunction with thereadAsBinaryString()
method of theFileReader
API. So, this isthe best solution when working with a relatively few data which must bestringified in order to be reused later. Anyhow, since working with strings instead oftyped arrays implies a greater waste of resources, this script makes sense only when you are dealing withsmall files (like images, documents, mp3, etc.). Otherwise, if you don't want to stringify the submitted or uploaded data, in addition totyped arrays, consider also the use oftheFormData
API.
Using FormData objects
TheFormData
constructor lets you compile a set of key/value pairs to send usingXMLHttpRequest
. Its primarily intended for use in sending form data, but can be used independently from forms in order to transmit keyed data. The transmitted data is in the same format that the form'ssubmit()
method would use to send the data if the form's encoding type were set to "multipart/form-data". FormData objects can be utilized in a number of ways with an XMLHttpRequest. For examples and explanations of how one can utilize FormData with XMLHttpRequests see theUsing FormData Objects page. For didactic purpose only we post hereatranslation ofthe previous example transformed so as to make use of theFormData
API. Note the brevity of the code:
<!doctype html><html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Sending forms with FormData – MDN</title> <script type="text/javascript"> "use strict"; function ajaxSuccess() { alert(this.responseText); } function AJAXSubmit(oFormElement) { if (!oFormElement.action) { return; } var oReq = new XMLHttpRequest(); oReq.onload = ajaxSuccess; if (oFormElement.method.toLowerCase() === "post") { oReq.open("post", oFormElement.action, true); oReq.send(new FormData(oFormElement)); } else { var oField, sFieldType, nFile, sSearch = ""; for (var nItem = 0; nItem < oFormElement.elements.length; nItem++) { oField = oFormElement.elements[nItem]; if (!oField.hasAttribute("name")) { continue; } sFieldType = oField.nodeName.toUpperCase() === "INPUT" ? oField.getAttribute("type").toUpperCase() : "TEXT"; if (sFieldType === "FILE") { for ( nFile = 0; nFile < oField.files.length; sSearch += "&" + escape(oField.name) + "=" + escape(oField.files[nFile++].name) ); } else if ( (sFieldType !== "RADIO" && sFieldType !== "CHECKBOX") || oField.checked ) { sSearch += "&" + escape(oField.name) + "=" + escape(oField.value); } } oReq.open( "get", oFormElement.action.replace( /(?:\?.*)?$/, sSearch.replace(/^&/, "?"), ), true, ); oReq.send(null); } } </script> </head> <body> <h1>Sending forms with FormData</h1> <h2>Using the GET method</h2> <form action="register.php" method="get" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Registration example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> <h2>Using the POST method</h2> <h3>Enctype: application/x-www-form-urlencoded (default)</h3> <form action="register.php" method="post" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Registration example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> <h3>Enctype: text/plain</h3> <p>The text/plain encoding is not supported by the FormData API.</p> <h3>Enctype: multipart/form-data</h3> <form action="register.php" method="post" enctype="multipart/form-data" onsubmit="AJAXSubmit(this); return false;"> <fieldset> <legend>Upload example</legend> <p> First name: <input type="text" name="firstname" /><br /> Last name: <input type="text" name="lastname" /><br /> Sex: <input type="radio" name="sex" value="male" /> <label for="sex_male">Male</label> <input type="radio" name="sex" value="female" /> <label for="sex_female">Female</label><br /> Password: <input type="password" name="secret" /><br /> What do you prefer: <select name="image_type"> <option>Books</option> <option>Cinema</option> <option>TV</option> </select> </p> <p> Post your photos: <input type="file" multiple name="photos[]" /> </p> <p> <input type="checkbox" name="vehicle[]" value="Bike" /> <label for="vehicle_bike">I have a bike</label><br /> <input type="checkbox" name="vehicle[]" value="Car" /> <label for="vehicle_car">I have a car</label> </p> <p> Describe yourself:<br /> <textarea name="description" cols="50" rows="8"></textarea> </p> <p> <input type="submit" value="Submit" /> </p> </fieldset> </form> </body></html>
Nota:As we said,FormData
objects are notstringifiable objects. If you want to stringify a submitted data, usethe previouspure-AJAX example. Note also that, although in this example there are somefile
<input>
fields,when you submit a form through theFormData
API you do not need to use theFileReader
API also: files are automatically loaded and uploaded.
Cross-site XMLHttpRequest
Modern browsers support cross-site requests by implementing the web applications working group'sAccess Control for Cross-Site Requests standard. As long as the server is configured to allow requests from your web application's origin,XMLHttpRequest
will work. Otherwise, anINVALID_ACCESS_ERR
exception is thrown.
Bypassing the cache
A, cross-browser compatible approach to bypassing the cache is to append a timestamp to the URL, being sure to include a "?" or "&" as appropriate. For example:
http://foo.com/bar.html -> http://foo.com/bar.html?12345http://foo.com/bar.html?foobar=baz -> http://foo.com/bar.html?foobar=baz&12345
Since the local cache is indexed by URL, this causes every request to be unique, thereby bypassing the cache.
You can automatically adjust URLs using the following code:
var oReq = new XMLHttpRequest();oReq.open( "GET", url + (/\?/.test(url) ? "&" : "?") + new Date().getTime(), true,);oReq.send(null);
Security
The recommended way to enable cross-site scripting is to use theAccess-Control-Allow-Origin
HTTP header in the response to the XMLHttpRequest.
XMLHttpRequests being stopped
If you end up with an XMLHttpRequest havingstatus=0
andstatusText=null
, it means that the request was not allowed to be performed. It wasUNSENT
. A likely cause for this is when theXMLHttpRequest
origin (at the creation of the XMLHttpRequest) has changed when the XMLHttpRequest is thenopen()
. This case can happen for example when one has an XMLHttpRequest that gets fired on an onunload event for a window: the XMLHttpRequest gets in fact created when the window to be closed is still there, and then the request is sent (ieopen()
) when this window has lost its focus and potentially different window has gained focus. The way to avoid this problem is to set a listener on the new window "activate" event that gets set when the old window has its "unload" event fired.
Using XMLHttpRequest from JavaScript modules / XPCOM components
InstantiatingXMLHttpRequest
from aJavaScript module or an XPCOM component works a little differently; it can't be instantiated using theXMLHttpRequest()
constructor. The constructor is not defined inside components and the code results in an error. The best way to work around this is to use the XPCOM component constructor.
const XMLHttpRequest = Components.Constructor( "@mozilla.org/xmlextras/xmlhttprequest;1",);var oReq = XMLHttpRequest();
Unfortunately in versions of Gecko prior to Gecko 16 there is a bug which can cause requests created this way to be cancelled for no reason. If you need your code to work on Gecko 15 or earlier, you can get the XMLHttpRequest constructor from the hidden DOM window like so.
const { XMLHttpRequest } = Components.classes[ "@mozilla.org/appshell/appShellService;1"].getService(Components.interfaces.nsIAppShellService).hiddenDOMWindow;var oReq = XMLHttpRequest();
See also
- MDC AJAX introduction
- HTTP access control
- How to check the security state of an XMLHTTPRequest over SSL
- XMLHttpRequest - REST and the Rich User Experience
- Microsoft documentation
- Apple developers' reference
- "Using the XMLHttpRequest Object" (jibbering.com)
- The XMLHttpRequest Object: W3C Specification
- Web Progress Events specification