Cross-Domain JSON post request to the API?

Hi all,

I'm trying to access the API through javascript, but I'm hitting a barrier where I can't post Ajax JSON POST requests to the API, since my website is not hosted on the same domain as the zenoss instance (well, it's on the same domain but not using the same port, thus hitting the same-origin barrier imposed on XMLHttpRequest).

As far as I can see, I have two possible solutions. I can either host my webpage on the same domain and port as zenoss (I would then need to be able to put my website folder on the document root and be able to browse it) or I need to add the header "Access-Control-Allow-Origin" to the responses sent by Zenoss to my requests.

The thing is, I don't know how to do any of those. I think I may be able to add the header when creating the response using the HTTPResponse class from ZPublisher, but I have no idea where Zenoss is actually instantiating this class.

Can anyone please shed a light over this

Thanks.