Ajax解决跨域无权限

<pre name="code" class="html">function readIC() { 
dwr.util.setValue('cardNO',null);
document.getElementById("txtAmount").innerHTML="";
  var str = top.topFrame.readICCard();
   obj = eval( "(" + str + ")" );//转换后的JSON对象
    if(str != null&&typeof(obj.iccardno) != "undefined")
{
test(obj.iccardno);
}else
document.getElementById("message").innerHTML="<span  style='color:#FF0000'>请把IC卡放入读卡器后点确定</span>";
}
function test(str){
var scriptTag = document.getElementById("cgi_emotion_list"); 
    var oHead = document.getElementsByTagName('head').item(0); 
if(scriptTag){oHead.removeChild(scriptTag)}; 
    var s = document.createElement("SCRIPT");
s.id="cgi_emotion_list";
    document.getElementsByTagName("HEAD")[0].appendChild(s);
var rnd=new Date().getTime();
    s.src="http://127.0.0.1:8089/webbfp/black.htm?cardid="+str+"&rnd="+rnd;
}
function visitCountCallBack(data){
    document.getElementsByTagName("HEAD")[0].removeChild(document.getElementById("cgi_emotion_list")); 
    for(var i in data){
        var e =document.getElementById(i);
        var isblack=data[i];//action中out.write的data
if(isblack=="false"||isblack==false){
//显示
document.getElementById("message").innerHTML="请点击充值继续操作";
dwr.util.setValue('cardNO',obj.iccardno);
document.getElementById("txtAmount").innerHTML=obj.amount;
}else{
document.getElementById("message").innerHTML="<span  style='color:#FF0000'>黑卡,无法充值</span>";}
    }
}</pre>
<br />
<br />

//action代码String cardid = ServletRequestUtils.getRequiredStringParameter(request,"cardid");response.addHeader("P3P","CP=CAO PSA OUR");//JSresponse.setContentType("text/javascript");//JS response.setHeader("Content-Type", "text/javascript; charset=UTF-8");//JSPrintWriter out = response.getWriter();blacks = webDAO.findBlacklistinvoicenos(cardid );//判断是否存在卡号if (blacks != null && blacks.size() > 0) {out.write("visitCountCallBack({\"isblack\":true});");LOGGER.info("-----------------succees-----------------");} else{ out.write("visitCountCallBack({\"isblack\":false});"); }out.close();return null;