How to solve the error "SCRIPT7002: XMLHttpRequest: Network Error 0x80070005, Access is denied." in IE

33

In my web site, I created a map with ALK Maps, I display the points (Markers) and roads (routings) and all this works fine in Firefox and Chrome, but in IE I display the map and points, but when I go to the road I get the error:

"SCRIPT7002: XMLHttpRequest: Network Error 0x80070005, Access is denied."

  I found a solution: security area (Internet Options> Security) make ENABLE The Following setting: Miscellaneous> Access data sources across domains.

Is there a solution to not ask customers to my website to do this configuration?

ajax
internet-explorer
configuration
asked on Stack Overflow Apr 27, 2015 by Jawadovic3814 • edited Apr 30, 2015 by Konrad Krakowiak

4 Answers

15

I don't think it's a good idea to ask your customers to disable this configuration at all. Remember that enabling and making this change does not only apply to your website but to other websites as well.

There's a huge security reason why it is disabled in Internet and Restricted Sites zones by default and it could make your customers vulnerable to different types of CORS (Cross Origin Resource Sharing) attacks

Rather than making changes on the browser level, try to enable CORS in your client/server side code or infrastructure:

http://enable-cors.org/

http://www.html5rocks.com/en/tutorials/cors/

answered on Stack Overflow Apr 28, 2015 by Roman Canlas
5

We were also running into this issue and the problem was the target URL was exceeding the maximum length of ~2,000 characters in IE11.

I agree with @user145400 that if it works in Chrome and Firefox it is very likely that CORS is already correctly enabled.

answered on Stack Overflow Nov 22, 2018 by Bugs Bunny
3

As others have mentioned, CORS came into play. In my case, IE was sending an additional header to the server (Content-Type) that the other browsers weren't, and this header wasn't allowed by my policy. Adding the header to the policy fixed the issue.

answered on Stack Overflow Dec 27, 2018 by Conner
0

I run into this issue when behind a SonicWall VPN at work. My solution is to add the domain to the trusted list of sites under IE's Internet Options > Security > Trusted Sites menu; this will impact Edge as well since it seems to use IE's security settings in this regard.

answered on Stack Overflow Feb 26, 2019 by Dave Cole

User contributions licensed under CC BY-SA 3.0