Can my atlassian cloud addon send a request (JS, ajax) to my addon server?

[Steffen Stamprath]

Can my atlassian cloud addon send a request (JS, ajax) to my addon server?

[Einar Pehrson · Accepted solution]

Yes.

The Same-Origin Policy poses no restriction, it only compares the origin of your iframe to that of the URL you are requesting.

The host application doesn't specify the sandbox attribute on the iframe, and as such doesn't impose any additional restrictions on what you can do.

Note however that you cannot use the request module in our JavaScript API to make AJAX requests back to your add-on.

[Mike Staas]

If your add-on exposes one of the modules that render an iframe in the host product (e.g. Panel or Page) you can include whatever JavaScript you like in the content your add-on server responds with for that module URL.

E: See the Connect documentation here: https://developer.atlassian.com/static/connect/docs/latest/modules/