Currently, I am diving into the world of the Prototype Ajax API. While going through their documentation, I stumbled upon this important security note:
It is crucial to remember that for security purposes, specifically to prevent cross-site scripting attacks, Ajax requests are restricted to URLs with the same protocol, host, and port as the page initiating the request. Although some browsers may allow requests to arbitrary URLs, it is not advisable to rely on this behavior.
This brings up a question for me - does this constraint mean that I cannot send requests from one app's backend to another app's backend? Or could my understanding of this be off track? As someone who is new to Javascript, any clarification on this matter would be greatly appreciated. Thank you!