We launched our Customer Portal first without Force.com Sites. Then after a couple of months we deployed a Force.com site to be the front end of the portal.

The issue i am having is that some customers continue to access the portal through the Customer Portal URL which causes issues with some VF pages and custom links once they are logged in.

My question, Is there anyway to prevent users from logging in using the Customer Portal Login URL and force them to use the Force.com Site login page?


Question: local AJAX-call to remote site works in Safari but not in other browsers
Answer: CHROME

There is a plugin for chrome that will force it to ignore the security policy. You can also do this with flags. Note, please do not browse the "real web" with this enabled as it is a security risk for your computer.

FIREFOX

This thread indicates that there is presently no way to do this in firefox.

OPERA

Again, there does not appear to be a built in way to ignore CORS policies.

The alternative would be to have the server (http://my.domain.tld) in your case return the proper headers - specifically Access-Control-Allow-Origin: