Fix for #1990: Introducing $.mobile.ajaxCrossDomainEnabled defaults to false

js/jquery.mobile.core.js

@@ -33,6 +33,9 @@
 		// Automatically handle clicks and form submissions through Ajax, when same-domain
 		ajaxEnabled: true,
 
+		// Allow cross domain XHR, use at your own risks
+		ajaxCrossDomainEnabled: false,
+
 		// Automatically load and show pages based on location.hash
 		hashListeningEnabled: true,
 

js/jquery.mobile.navigation.js

@@ -612,6 +612,15 @@
 			$.mobile.showPageLoadingMsg();
 		}
 
+		$.ajaxTransport("+*", function( s ) {
+			if ( s.crossDomain && !$.mobile.ajaxCrossDomainEnabled ) {
+				return {
+					send: $.noop,
+					abort: $.noop
+				};
+			}
+		});
+		
 		// Load the new page.
 		$.ajax({
 			url: fileUrl,