{"id":65,"date":"2009-11-28T23:11:12","date_gmt":"2009-11-28T23:11:12","guid":{"rendered":"http:\/\/www.thewiredguy.com\/wordpress\/?p=65"},"modified":"2009-11-28T23:11:12","modified_gmt":"2009-11-28T23:11:12","slug":"cross-domain-requests-in-silverlight-and-using-yahoo-pipes-as-a-proxy","status":"publish","type":"post","link":"https:\/\/inullable.in\/blog\/?p=65","title":{"rendered":"Cross-Domain requests in Silverlight and using Yahoo Pipes as a proxy"},"content":{"rendered":"

Last week, I have been developing this silverlight twitter application and was struck at a point, where I needed to pull RSS feeds from twitter. The code will always throw a Security Exception<\/a> again and again. After digging a bit, I found out that silverlight doesn’t allow cross-domain calls to any domain you want.<\/p>\n

This policy has been enforced to prevent session riding<\/a>, for further details look this Karen Corby’s blog post<\/a> on cross domain requests.<\/p>\n

Turns out that in silverlight, HTTP requests to non-original domains are allowed if the server has exclusively allowed to accept requests. The primary way of enabling cross domain calls is through a policy file placed at the root of the server.  Two types of policy files are supported:<\/p>\n

    \n
  1. Silverlight Cross Domain Policy File (clientaccesspolicy.xml) <\/li>\n
  2. (A subset of the) Flash Cross Domain Policy File (crossdomain.xml)<\/li>\n<\/ol>\n

    Now, the problem is that twitter don’t have policy files placed in the server root. Possible way to get around this is to use a proxy for requests. you can make a proxy on your server, that can on application request, fetch the RSS data from twitter and send it back to your application. EASY!<\/p>\n

    but what if, you don’t want your own server proxy… <\/p>\n

    reasons<\/strong>:<\/p>\n