mirror of
https://github.com/openseadragon/openseadragon.git
synced 2025-03-04 22:53:14 +03:00
1b6cf93474
Prior to IE 10, XmlHttpRequest cannot be used for requests to a different origin even when the target URL's CORS headers would allow access (see http://caniuse.com/#feat=cors). This is easy to miss in testing if you use a single origin during testing but have a CDN or domain-sharding for production and will break the error handler function passed to makeAjaxRequest() if that code assumes it can access properties on the request object. This adds a more informative pointer to Microsoft's documentation when a security exception is raised.