XMLHttpRequest (XHR) objects are used to interact with servers. You can retrieve data from a URL without having to do a full page refresh. This enables a Web page to update just part of a page without disrupting what the user is doing. XMLHttpRequest is used heavily in AJAX programming.
<div id="interfaceDiagram" style="display: inline-block; position: relative; width: 100%; padding-bottom: 23.076923076923077%; vertical-align: middle; overflow: hidden;"><svg style="display: inline-block; position: absolute; top: 0; left: 0;" viewbox="-50 0 650 150" preserveAspectRatio="xMinYMin meet"><a xlink:href="/docs/Web/API/EventTarget" target="_top"><rect x="1" y="1" width="110" height="50" fill="#fff" stroke="#D4DDE4" stroke-width="2px" /><text x="56" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">EventTarget</text></a><polyline points="111,25 121,20 121,30 111,25" stroke="#D4DDE4" fill="none"/><line x1="121" y1="25" x2="151" y2="25" stroke="#D4DDE4"/><a xlink:href="/docs/Web/API/XMLHttpRequestEventTarget" target="_top"><rect x="151" y="1" width="250" height="50" fill="#fff" stroke="#D4DDE4" stroke-width="2px" /><text x="276" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">XMLHttpRequestEventTarget</text></a><polyline points="401,25 411,20 411,30 401,25" stroke="#D4DDE4" fill="none"/><line x1="411" y1="25" x2="441" y2="25" stroke="#D4DDE4"/><a xlink:href="/docs/Web/API/XMLHttpRequest" target="_top"><rect x="441" y="1" width="140" height="50" fill="#F4F7F8" stroke="#D4DDE4" stroke-width="2px" /><text x="511" y="30" font-size="12px" font-family="Consolas,Monaco,Andale Mono,monospace" fill="#4D4E53" text-anchor="middle" alignment-baseline="middle">XMLHttpRequest</text></a></svg></div>
a:hover text { fill: #0095DD; pointer-events: all;}
Despite its name, XMLHttpRequest can be used to retrieve any type of data, not just XML.
If your communication needs to involve receiving event data or message data from a server, consider using server-sent events through the EventSource interface. For full-duplex communication, WebSockets may be a better choice.
Constructor
XMLHttpRequest()- The constructor initializes an XMLHttpRequest. It must be called before any other method calls.
Properties
This interface also inherits properties of XMLHttpRequestEventTarget and of EventTarget.
XMLHttpRequest.onreadystatechange- An
EventHandlerthat is called whenever thereadyStateattribute changes. XMLHttpRequest.readyStateRead only- Returns an
unsigned short, the state of the request. XMLHttpRequest.responseRead only- Returns an
ArrayBuffer,Blob,Document, JavaScript object, or aDOMString, depending on the value ofXMLHttpRequest.responseType, that contains the response entity body. XMLHttpRequest.responseTextRead only- Returns a
DOMStringthat contains the response to the request as text, ornullif the request was unsuccessful or has not yet been sent. XMLHttpRequest.responseType- Is an enumerated value that defines the response type.
XMLHttpRequest.responseURLRead only- Returns the serialized URL of the response or the empty string if the URL is null.
XMLHttpRequest.responseXMLRead only- Returns a
Documentcontaining the response to the request, ornullif the request was unsuccessful, has not yet been sent, or cannot be parsed as XML or HTML. Not available in workers. XMLHttpRequest.statusRead only- Returns an
unsigned shortwith the status of the response of the request. XMLHttpRequest.statusTextRead only- Returns a
DOMStringcontaining the response string returned by the HTTP server. UnlikeXMLHttpRequest.status, this includes the entire text of the response message ("200 OK", for example).Note: According to the HTTP/2 specification (8.1.2.4 Response Pseudo-Header Fields), HTTP/2 does not define a way to carry the version or reason phrase that is included in an HTTP/1.1 status line.
XMLHttpRequest.timeout- Is an
unsigned longrepresenting the number of milliseconds a request can take before automatically being terminated. XMLHttpRequestEventTarget.ontimeout- Is an
EventHandlerthat is called whenever the request times out. XMLHttpRequest.uploadRead only- Is an
XMLHttpRequestUpload, representing the upload process. XMLHttpRequest.withCredentials- Is a
Booleanthat indicates whether or not cross-siteAccess-Controlrequests should be made using credentials such as cookies or authorization headers.
Non-standard properties
XMLHttpRequest.channelRead only- Is a
nsIChannel. The channel used by the object when performing the request. XMLHttpRequest.mozAnonRead only- Is a boolean. If true, the request will be sent without cookie and authentication headers.
XMLHttpRequest.mozSystemRead only- Is a boolean. If true, the same origin policy will not be enforced on the request.
XMLHttpRequest.mozBackgroundRequest- Is a boolean. It indicates whether or not the object represents a background service request.
XMLHttpRequest.mozResponseArrayBufferObsolete since Gecko 6 Read onlyArrayBuffer. The response to the request, as a JavaScript typed array.XMLHttpRequest.multipartObsolete since Gecko 22- This Gecko-only feature, a boolean, was removed in Firefox/Gecko 22. Please use Server-Sent Events, Web Sockets, or
responseTextfrom progress events instead.
Event handlers
onreadystatechange as a property of the XMLHttpRequest instance is supported in all browsers.
Since then, a number of additional event handlers have been implemented in various browsers (onload, onerror, onprogress, etc.). See Using XMLHttpRequest.
More recent browsers, including Firefox, also support listening to the XMLHttpRequest events via standard addEventListener() APIs in addition to setting on* properties to a handler function.
Methods
XMLHttpRequest.abort()- Aborts the request if it has already been sent.
XMLHttpRequest.getAllResponseHeaders()- Returns all the response headers, separated by CRLF, as a string, or
nullif no response has been received. XMLHttpRequest.getResponseHeader()- Returns the string containing the text of the specified header, or
nullif either the response has not yet been received or the header doesn't exist in the response. XMLHttpRequest.open()- Initializes a request.
XMLHttpRequest.overrideMimeType()- Overrides the MIME type returned by the server.
XMLHttpRequest.send()- Sends the request. If the request is asynchronous (which is the default), this method returns as soon as the request is sent.
XMLHttpRequest.setRequestHeader()- Sets the value of an HTTP request header. You must call
setRequestHeader()afteropen(), but beforesend().
Non-standard methods
XMLHttpRequest.init()- Initializes the object for use from C++ code.
Warning: This method must not be called from JavaScript.
XMLHttpRequest.openRequest()- Initializes a request. This method is to be used from native code; to initialize a request from JavaScript code, use
open()instead. See the documentation foropen(). XMLHttpRequest.sendAsBinary()- A variant of the
send()method that sends binary data.
Events
abort- Fired when a request has been aborted, for example because the program called
XMLHttpRequest.abort().
Also available via theonabortproperty. error- Fired when the request encountered an error.
Also available via theonerrorproperty. load- Fired when an
XMLHttpRequesttransaction completes successfully.
Also available via theonloadproperty. loadend- Fired when a request has completed, whether successfully (after
load) or unsuccessfully (afterabortorerror).
Also available via theonloadendproperty. loadstart- Fired when a request has started to load data.
Also available via theonloadstartproperty. progress- Fired periodically when a request receives more data.
Also available via theonprogressproperty. timeout- Fired when progress is terminated due to preset time expiring.
Also available via theontimeoutproperty.
Specifications
| Specification | Status | Comment |
|---|---|---|
| XMLHttpRequest | Living Standard | Live standard, latest version |
Browser compatibility
| Desktop | Mobile | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
XMLHttpRequest | Chrome Full support 1 | Edge
Full support
12
| Firefox Full support 1 | IE
Full support
7
| Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
abort | Chrome Full support 18 | Edge Full support 12 | Firefox Full support Yes | IE Full support 5 | Opera Full support Yes | Safari Full support 1.2 | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support Yes |
abort event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
error event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
getAllResponseHeaders | Chrome Full support 1 | Edge Full support 12 | Firefox
Full support
4
| IE Full support 5 | Opera Full support Yes | Safari Full support 1.2 | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android
Full support
4
| Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support Yes |
getResponseHeader | Chrome Full support 1 | Edge Full support 12 | Firefox
Full support
1
| IE Full support 5 | Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android
Full support
4
| Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
load event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 9 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
loadend event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
loadstart event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
onreadystatechange | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE Full support 5 | Opera Full support 9 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
open | Chrome Full support 1 | Edge Full support 12 | Firefox
Full support
1
| IE Full support 5 | Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android
Full support
4
| Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
overrideMimeType | Chrome Full support 1 | Edge Full support 12 | Firefox Full support Yes | IE
Full support
11
| Opera Full support Yes | Safari Full support 1.2 | WebView Android Full support Yes | Chrome Android Full support 18 | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support 1.0 |
progress event | Chrome Full support Yes | Edge Full support ≤79 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS ? | Samsung Internet Android Full support Yes |
readyState | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE Full support 7 | Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
response | Chrome Full support 9 | Edge Full support 12 | Firefox Full support 6 | IE Full support 10 | Opera Full support 11.6 | Safari Full support 5.1 | WebView Android Full support ≤37 | Chrome Android Full support 18 | Firefox Android Full support 6 | Opera Android Full support 12 | Safari iOS Full support 6 | Samsung Internet Android Full support 1.0 |
responseText | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE
Full support
5
| Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
responseType | Chrome Full support 31 | Edge Full support 12 | Firefox Full support 6 | IE Full support 10 | Opera Full support 18 | Safari Full support 7 | WebView Android Full support 55 | Chrome Android Full support 55 | Firefox Android Full support 50 | Opera Android Full support 42 | Safari iOS Full support 7 | Samsung Internet Android Full support 6.0 |
responseURL | Chrome Full support 37 | Edge Full support 14 | Firefox Full support 32 | IE No support No | Opera Full support 24 | Safari Full support 8 | WebView Android Full support 37 | Chrome Android Full support 37 | Firefox Android Full support 32 | Opera Android Full support 24 | Safari iOS Full support Yes | Samsung Internet Android Full support 3.0 |
responseXML | Chrome Full support Yes | Edge Full support 12 | Firefox
Full support
Yes
| IE Full support Yes | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android
Full support
Yes
| Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support Yes |
send | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE Full support 5 | Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
sendAsBinary | Chrome
No support
No
| Edge
No support
No
| Firefox No support 2 — 31 | IE No support No | Opera No support No | Safari No support No | WebView Android
No support
No
| Chrome Android
No support
No
| Firefox Android No support 4 — 31 | Opera Android No support No | Safari iOS No support No | Samsung Internet Android
No support
No
|
setRequestHeader | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE Full support 5 | Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
status | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE
Full support
7
| Opera Full support 8 | Safari Full support 1.2 | WebView Android Full support 1 | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support 10.1 | Safari iOS Full support 1 | Samsung Internet Android Full support 1.0 |
statusText | Chrome Full support 1 | Edge Full support 12 | Firefox Full support 1 | IE
Full support
7
| Opera Full support Yes | Safari Full support 1.2 | WebView Android Full support Yes | Chrome Android Full support 18 | Firefox Android Full support 4 | Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support 1.0 |
timeout | Chrome Full support 29 | Edge Full support 12 | Firefox Full support 12 | IE Full support 8 | Opera
Full support
17
| Safari Full support 6.1 | WebView Android Full support ≤37 | Chrome Android Full support 29 | Firefox Android Full support 14 | Opera Android
Full support
18
| Safari iOS Full support 7 | Samsung Internet Android Full support 2.0 |
timeout event | Chrome Full support Yes | Edge Full support ≤18 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support Yes | WebView Android Full support Yes | Chrome Android Full support Yes | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support Yes |
upload | Chrome Full support 1 | Edge Full support 12 | Firefox Full support Yes | IE Full support 10 | Opera Full support Yes | Safari Full support 10 | WebView Android Full support Yes | Chrome Android Full support 18 | Firefox Android Full support Yes | Opera Android Full support Yes | Safari iOS Full support Yes | Samsung Internet Android Full support 1.0 |
withCredentials | Chrome Full support 3 | Edge Full support 12 | Firefox
Full support
3.5
| IE
Full support
10
| Opera Full support 12 | Safari Full support 4 | WebView Android Full support ≤37 | Chrome Android Full support 18 | Firefox Android
Full support
4
| Opera Android Full support 12 | Safari iOS Full support 3.2 | Samsung Internet Android Full support 1.0 |
Legend
- Full support
- Full support
- No support
- No support
- Compatibility unknown
- Compatibility unknown
- Non-standard. Expect poor cross-browser support.
- Non-standard. Expect poor cross-browser support.
- Deprecated. Not for use in new websites.
- Deprecated. Not for use in new websites.
- See implementation notes.
- See implementation notes.
See also
XMLSerializer: Serializing a DOM tree into XML- MDN tutorials covering
XMLHttpRequest: - HTML5 Rocks — New Tricks in XMLHttpRequest2
- Feature-Policy directive
sync-xhr
