Use XMLHttpRequest objects to interact with servers. You can retrieve data from a URL without having to do a full page refresh. This enables a Web page to update just part of a page without disrupting what the user is doing. XMLHttpRequest is used heavily in Ajax programming.
<div id="interfaceDiagram" style="display: inline-block; position: relative; width: 100%; padding-bottom: 11.666666666666666%; vertical-align: middle; overflow: hidden;"><svg style="display: inline-block; position: absolute; top: 0; left: 0;" viewbox="-50 0 600 70" preserveAspectRatio="xMinYMin meet"><a xlink:href="https://developer.mozilla.org/en-US/docs/Web/API/EventTarget" target="_top"><rect x="1" y="1" width="110" height="50" fill="#fff" stroke="#D4DDE4" stroke-width="2px" /><text x="56" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">EventTarget</text></a><polyline points="111,25 121,20 121,30 111,25" stroke="#D4DDE4" fill="none"/><line x1="121" y1="25" x2="151" y2="25" stroke="#D4DDE4"/><a xlink:href="https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequestEventTarget" target="_top"><rect x="151" y="1" width="250" height="50" fill="#fff" stroke="#D4DDE4" stroke-width="2px" /><text x="276" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">XMLHttpRequestEventTarget</text></a><polyline points="401,25 411,20 411,30 401,25" stroke="#D4DDE4" fill="none"/><line x1="411" y1="25" x2="441" y2="25" stroke="#D4DDE4"/><a xlink:href="https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest" target="_top"><rect x="441" y="1" width="140" height="50" fill="#F4F7F8" stroke="#D4DDE4" stroke-width="2px" /><text x="511" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">XMLHttpRequest</text></a></svg></div>
a:hover text { fill: #0095DD; pointer-events: all;}
History
XMLHttpRequest was originally designed by Microsoft and adopted by Mozilla, Apple, and Google. It's now being standardized at the WHATWG. Despite its name, XMLHttpRequest can be used to retrieve any type of data, not just XML, and it supports protocols other than HTTP (including file and ftp).
Constructor
XMLHttpRequest()- The constructor initializes an XMLHttpRequest. It must be called before any other method calls.
Properties
This interface also inherits properties of XMLHttpRequestEventTarget and of EventTarget.
XMLHttpRequest.onreadystatechange- An
EventHandlerthat is called whenever thereadyStateattribute changes. XMLHttpRequest.readyStateRead only- Returns an
unsigned short, the state of the request. XMLHttpRequest.responseRead only- Returns an
ArrayBuffer,Blob,Document, JavaScript object, or aDOMString, depending on the value ofXMLHttpRequest.responseType. that contains the response entity body. XMLHttpRequest.responseTextRead only- Returns a
DOMStringthat contains the response to the request as text, ornullif the request was unsuccessful or has not yet been sent. XMLHttpRequest.responseType- Is an enumerated value that defines the response type.
XMLHttpRequest.responseURLRead only- Returns the serialized URL of the response or the empty string if the URL is null.
XMLHttpRequest.responseXMLRead only Not available to workers- Returns a
Documentcontaining the response to the request, ornullif the request was unsuccessful, has not yet been sent, or cannot be parsed as XML or HTML. XMLHttpRequest.statusRead only- Returns an
unsigned shortwith the status of the response of the request. XMLHttpRequest.statusTextRead only- Returns a
DOMStringcontaining the response string returned by the HTTP server. UnlikeXMLHTTPRequest.status, this includes the entire text of the response message ("200 OK", for example).
Note: via HTTP/2 specification (8.1.2.4 Response Pseudo-Header Fields), HTTP/2 does not define a way to carry the version or reason phrase that is included in an HTTP/1.1 status line.
XMLHttpRequest.timeout- Is an
unsigned longrepresenting the number of milliseconds a request can take before automatically being terminated. XMLHttpRequestEventTarget.ontimeout- Is an
EventHandlerthat is called whenever the request times out. XMLHttpRequest.uploadRead only- Is an
XMLHttpRequestUpload, representing the upload process. XMLHttpRequest.withCredentials- Is a
Booleanthat indicates whether or not cross-siteAccess-Controlrequests should be made using credentials such as cookies or authorization headers.
Non-standard properties
XMLHttpRequest.channelRead only- Is a
nsIChannel. The channel used by the object when performing the request. XMLHttpRequest.mozAnonRead only- Is a boolean. If true, the request will be sent without cookie and authentication headers.
XMLHttpRequest.mozSystemRead only- Is a boolean. If true, the same origin policy will not be enforced on the request.
XMLHttpRequest.mozBackgroundRequest- Is a boolean. It indicates whether or not the object represents a background service request.
XMLHttpRequest.mozResponseArrayBufferObsolete since Gecko 6 Read only- Is an
ArrayBuffer. The response to the request, as a JavaScript typed array. XMLHttpRequest.multipartObsolete since Gecko 22- This Gecko-only feature, a boolean, was removed in Firefox/Gecko 22. Please use Server-Sent Events, Web Sockets, or
responseTextfrom progress events instead.
Event handlers
onreadystatechange as a property of the XMLHttpRequest instance is supported in all browsers.
Since then, a number of additional event handlers were implemented in various browsers (onload, onerror, onprogress, etc.). These are supported in Firefox. In particular, see nsIXMLHttpRequestEventTarget and Using XMLHttpRequest.
More recent browsers, including Firefox, also support listening to the XMLHttpRequest events via standard addEventListener APIs in addition to setting on* properties to a handler function.
Methods
XMLHttpRequest.abort()- Aborts the request if it has already been sent.
XMLHttpRequest.getAllResponseHeaders()- Returns all the response headers, separated by CRLF, as a string, or
nullif no response has been received. XMLHttpRequest.getResponseHeader()- Returns the string containing the text of the specified header, or
nullif either the response has not yet been received or the header doesn't exist in the response. XMLHttpRequest.open()- Initializes a request. This method is to be used from JavaScript code; to initialize a request from native code, use
openRequest()instead. XMLHttpRequest.overrideMimeType()- Overrides the MIME type returned by the server.
XMLHttpRequest.send()- Sends the request. If the request is asynchronous (which is the default), this method returns as soon as the request is sent.
XMLHttpRequest.setRequestHeader()- Sets the value of an HTTP request header. You must call
setRequestHeader()afteropen(), but beforesend().
Non-standard methods
XMLHttpRequest.init()- Initializes the object for use from C++ code.
XMLHttpRequest.openRequest()- Initializes a request. This method is to be used from native code; to initialize a request from JavaScript code, use
open()instead. See the documentation foropen(). XMLHttpRequest.sendAsBinary()- A variant of the
send()method that sends binary data.
Specifications
| Specification | Status | Comment |
|---|---|---|
| XMLHttpRequest | Living Standard | Live standard, latest version |
Browser compatibility
| Feature | Chrome | Edge | Firefox (Gecko) | Internet Explorer | Opera | Safari (WebKit) |
|---|---|---|---|---|---|---|
| Basic support (XHR1) | 1 | (Yes) | 1.0 (1.7 or earlier) | 7 | (Yes) | 1.2 |
send(ArrayBuffer) |
9 | (Yes) | 9.0 (9.0) | 10 | 11.60 | ? |
send(ArrayBufferView) |
22 | (Yes) | 20.0 (20.0) | ? | ? | ? |
send(Blob) |
7 | (Yes) | 3.6 (1.9.2) | 10 | 12 | ? |
send(FormData) |
6 | (Yes) | 4.0 (2.0) | 10 | 12 | ? |
sendAsBinary(DOMString) |
No support[1] | No support | 2.0 (1.8.1) | No support | No support | No support |
response |
10 | (Yes) | 6.0 (6.0) | 10 | 11.60 | (Yes) |
responseType = 'arraybuffer' |
10 | (Yes) | 6.0 (6.0) | 10 | 11.60 | (Yes) |
responseType = 'blob' |
19 | (Yes) | 6.0 (6.0) | 10 | 12 | (Yes) |
responseType = 'document' |
18 | (Yes) | 11.0 (11.0) | 10 | No support | 6.1 |
responseType = 'json' |
31 | No support | 10.0 (10.0) | No support | 12[2] No support 16 17 |
(Yes) |
| Progress Events | 7 | (Yes) | 3.5 (1.9.1) | 10 | 12 | (Yes) |
withCredentials |
3 | (Yes) | 3.5 (1.9.1) | 10 | 12 | 4 |
timeout |
29.0 | (Yes) | 12.0 (12.0) | 8 | 12 16 |
(Yes) |
responseType = 'moz-blob' |
No support | No support | 12.0 (12.0) | No support | No support | No support |
| Feature | Android | Chrome for Android | Edge | Firefox Mobile (Gecko) | IE Phone | Opera Mobile | Safari Mobile |
|---|---|---|---|---|---|---|---|
| Basic support | ? | 1.0 | (Yes) | (Yes) | ? | ? | ? |
send(ArrayBuffer) |
? | ? | (Yes) | ? | ? | ? | ? |
send(ArrayBufferView) |
? | ? | (Yes) | ? | ? | ? | ? |
send(Blob) |
? | ? | (Yes) | ? | ? | ? | ? |
send(FormData) |
? | ? | (Yes) | ? | ? | ? | ? |
sendAsBinary(DOMString) |
? | ? | No support | ? | ? | ? | ? |
response |
? | ? | (Yes) | ? | ? | ? | ? |
responseType = 'arraybuffer' |
? | ? | (Yes) | ? | ? | ? | ? |
responseType = 'blob' |
? | ? | (Yes) | ? | ? | ? | ? |
responseType = 'document' |
? | ? | (Yes) | ? | ? | ? | ? |
responseType = 'json' |
? | ? | No support | ? | ? | ? | ? |
| Progress Events | ? | ? | (Yes) | ? | ? | ? | ? |
withCredentials |
? | ? | (Yes) | ? | ? | ? | ? |
timeout |
? | ? | (Yes) | ? | ? | ? | ? |
responseType = 'moz-blob' |
? | ? | No support | ? | ? | ? | ? |
[1] There is a polyfill available to support sendAsBinary().
[2] Before switching to Blink/Chromium, Opera supported responseType=json between Opera 12 and Opera 15. Support was added again in Opera 17.
See also
- MDN tutorials covering XMLHttpRequest:
- HTML5 Rocks — New Tricks in XMLHttpRequest2
Chrome scope availability— how to access XMLHttpRequest from JSM modules etc., which do not have access to DOM