Bug ID 435900: XDomainRequest object support

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF2, 11.4.0 HF6, 11.3.0 HF9

Opened: Oct 30, 2013

Severity: 3-Major

Related Article: K14927

Symptoms

XDomainRequest is not supported. No URLs are rewritten for this object. This leads to 'Access denied' errors in case of portal access if the client uses Microsoft Internet Explorer version 8 or version 9.

Impact

Cross-domain requests fail with 'Access denied' error.

Conditions

This occurs in web application that use XDomainRequest for cross-domain requests, when the client uses Microsoft Internet Explorer version 8 or version 9.

Workaround

To work around this issue, replace the XDomainRequest object with XMLHTTPRequest object using an iRule. Doing so is typically safe because in the case of portal access, web applications do not use cross-domain requests. The only restriction is when the XDomainRequest object includes the 'contentType' property, which is not supported by XMLHTTPRequest object.

Fix Information

XDomainRequest is supported similar to XMLHTTPRequest.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips