Is there no way to perform a cross domain AJAX request without getting a CORS error? Yes, there is a solution. Its called a secondary server. In other words, you can short circuit CORS Requests
errors using a secondary server to wrap the response with the required allow-* headers. And this can
be accomplished (for free) using openshift.com. In this case I am using openshift to handle a AJAX post request for the itunes RSS feed. The secondary server downloads the XML and adds the CORS headers to the response.