Can I post to a NetSuite Restlet from a chrome extension without going through a Suitelet first?

Question

Can I post to a NetSuite Restlet from a chrome extension without going through a Suitelet first? What if I use token authentication? I don't want to expose credentials, but I would rather not go create the extra step of a Suitelet for performance reasons.

Answer 1

No because of Cross-Origin Resource Sharing restrictions

I have one I use (locally only) but have to tell chrome to bypass security on mac. Other than that for a production application, not feasible. Use SSP

open -a Google\ Chrome --args --user-data-dir="" --disable-web-security

Answer 2

What are you trying to do? Why can’t you just do whatever processing in the suitelet?

If you need to do something with an elevated privilege level you can also set up a SSP application where a .ss file can be run as a role.