I am facing a challenge with a webservice located on a separate domain, specifically an authentication servlet delivering data in XML format. Whenever I attempt to use an XMLHttpRequest object to access this service, I encounter the Access-Control-Allow-Origin issue due to the cross-domain nature of the request. I have experimented with JSONP as an alternative solution, but unfortunately, it did not work because the service response remained in XML. Do you have any recommendations or suggestions for overcoming this hurdle? Perhaps altering the MIME type of the returned data in the JSONP call could be a potential solution, if feasible. It is important to note that changing the return type of the service from XML to JSON is not an option.
Thank you in advance for any advice or assistance you may provide.