Cross-domain loading of XML

[Elliotte Rusty Harold <elharo@ibiblio.org>]

On Tue, Dec 7, 2010 at 7:15 PM, Rob Koberg <rob@koberg.com> wrote:

> First thing: Get the browser builders to allow cross domain loading of
> XML. Without that you might as just bang your head on a post. (even
> with that, you will just be banging your head on a padded post)

Just want to double check this. JSON can be loaded cross-domain and
XML can't, right? I.e. I can eval JSON from an arbitrary host in my
browser-based JavaScript and I can't load XML using XmlHTTPRequest
unless it comes from the same host? Or is it more subtle than that? If
so, is there a detailed analysis somewhere of exactly under what
conditions I can load JSON from where and how?

Googling around I see some blog posts, but no detailed analysis.

-- 
Elliotte Rusty Harold
elharo@ibiblio.org