nl_tokens: Sets the request method request URL synchronous flag request username and request password .
pl_tokens: function ( method , url , async , user , password ) { var urlp ; // first two arguments are required if ( ! method || ! url ) { throw new x . DOMException ( x . DOMException . SYNTAX_ERR ) ; } // 2 - check if any code point in method is higher than U+00FF or after deflating method it does not match the method if ( / [\u0100-\uffff] / . test ( method ) || Encode . utf8_encode ( method ) !== method ) { throw new x . DOMException ( x . DOMException . SYNTAX_ERR ) ; } // 3 if ( ! ! ~ Basic . inArray ( method . toUpperCase ( ) , [ 'CONNECT' , 'DELETE' , 'GET' , 'HEAD' , 'OPTIONS' , 'POST' , 'PUT' , 'TRACE' , 'TRACK' ] ) ) { _method = method . toUpperCase ( ) ; } // 4 - allowing these methods poses a security risk if ( ! ! ~ Basic . inArray ( _method , [ 'CONNECT' , 'TRACE' , 'TRACK' ] ) ) { throw new x . DOMException ( x . DOMException . SECURITY_ERR ) ; } // 5 url = Encode . utf8_encode ( url ) ; // 6 - Resolve url relative to the XMLHttpRequest base URL. If the algorithm returns an error, throw a "SyntaxError". urlp = Url . parseUrl ( url ) ; _same_origin_flag = Url . hasSameOrigin ( urlp ) ; // 7 - manually build up absolute url _url = Url . resolveUrl ( url ) ; // 9-10, 12-13 if ( ( user || <mask> ) && ! _same_origin_flag ) { throw new x . DOMException ( x . DOMException . INVALID_ACCESS_ERR ) ; } _user = user || urlp . user ; _password = password || urlp . pass ; // 11 _async = async || true ; if ( _async === false && ( _p ( 'timeout' ) || _p ( 'withCredentials' ) || _p ( 'responseType' ) !== "" ) ) { throw new x . DOMException ( x . DOMException . INVALID_ACCESS_ERR ) ; } // 14 - terminate abort() // 15 - terminate send() // 18 _sync_flag = ! _async ; _send_flag = false ; _headers = { } ; _reset . call ( this ) ; // 19 _p ( 'readyState' , XMLHttpRequest . OPENED ) ; // 20 this . dispatchEvent ( 'readystatechange' ) ; }