XMLHttpRequest has a same-origin limitation, and there are good reasons for that, but an iframe-based solution sounds like it ought to work. Of course, that has problems of its own; for example, you can't easily issue an HTTP POST request from an iframe. But if that's not a problem for your case, it sounds as though it should be doable.