<p>I'm putting together a little tool that some business people can run on their local filesystems, since we don't want to setup a host for it.</p>

<p>Basically, its just HTML + Javascript (using jQuery) to pull some reports using REST from a 3rd party.</p>

<p>The problem is, FF3 and IE don't allow the ajax call, I get:</p>

<pre><code>Access to restricted URI denied" code: "1012
</code></pre>

<p>Obviously its an XSS issue...how do I work around it? The data returned is in XML format.</p>

<p>I was trying to do it this way:</p>

<pre><code>$.get(productUrl, function (data){
    alert (data);
});
</code></pre>

<p><strong>EDIT</strong>: To be clear...I'm not setting up an internal host for this(Way to much red tape), and we CANNOT host this externally due to the data being retrieved.</p>

<p><strong>EDIT #2</strong>: A little testing shows that I can use an IFRAME to make the request. Does anyone know if there any downsides to using a hidden IFRAME?</p>

If you have Python installed, a webserver to serve files can be as simple as
```
```
python -c “import SimpleHTTPServer;SimpleHTTPServer.test()”
```
```
Edit:
Original poster can't use this approach, but in general I think this is the way to solve this particular problem for future users with this issue.