The only guarantee of Ajax security seems to be the restrictions on cross domain name (cross-domain) AJAX requests. An AJAX request to another domain name is prohibited unless you open a Web page on your local hard disk, or if you open the restrictions on the transfer of data across domain names in IE. And for the Cross-domain judgment is very strict, different subdomains, or the same domain name of different ports, will be recognized as different domain names, we can not make an AJAX request to their resources.
Error tip: Deny access
One way to do this is to save the contents of a remote Web page to a local server and then read the contents of the local server, but this is always inconvenient.
The following address has a better solution: http://www.cnblogs.com/JeffreyZhao/archive/2007/02/02/break_the_browsers_restrictions_6.html