network draft

Author: iliakan

7-network/10-xmlhttprequest/article.md

@@ -445,6 +445,23 @@ function upload(file) {
 </script>
 ```
 
+## Cross-origin requests
+
+`XMLHttpRequest` can make cross-domain requests, using the same CORS policy as `fetch`.
+
+Just like `fetch`, it doesn't send cookies and HTTP-authorization to another origin by default. To enable them, set `xhr.withCredentials` to `true`:
+
+```js
+let xhr = new XMLHttpRequest();
+*!*
+xhr.withCredentials = true;
+*/!*
+s
+xhr.open('POST', 'http://anywhere.com/request');
+...
+```
+
+
 ## Summary
 
 Typical code of the GET-request with `XMLHttpRequest`:

7-network/2-fetch-crossorigin/article.md

@@ -0,0 +1,31 @@
+const Koa = require('koa');
+const app = new Koa();
+
+const Router = require('koa-router');
+
+let router = new Router();
+
+router.get('/script', async (ctx) => {
+  let callback = ctx.query.callback;
+
+  if (!callback) {
+    ctx.throw(400, 'Callback required!');
+  }
+
+  ctx.type = 'application/javascript';
+  ctx.body = `${callback}({
+    temperature: 25,
+    humidity: 78
+  })`;
+});
+
+app
+  .use(router.routes())
+  .use(router.allowedMethods());
+
+
+if (!module.parent) {
+  http.createServer(app.callback()).listen(8080);
+} else {
+  exports.accept = app.callback();
+}

7-network/2-fetch-crossorigin/progress.view/index.html renamed to 7-network/2-fetch-crossorigin/demo.view/index.html

@@ -16,7 +16,7 @@ let promise = fetch(url, {
   body: undefined // string, FormData, Blob, BufferSource, or URLSearchParams
   referrer: "about:client", // "" for no-referrer, or an url from the current origin
   referrerPolicy: "no-referrer-when-downgrade", // no-referrer, origin, same-origin...
-  mode: "cors", // same-origin, no-cors, navigate, or websocket
+  mode: "cors", // same-origin, no-cors
   credentials: "same-origin", // omit, include
   cache: "default", // no-store, reload, no-cache, force-cache, or only-if-cached
   redirect: "follow", // manual, error