title: Angular/Breeze app connecting to Web API throws "Access Denied" error on IE11
body: <h3>The Application</h3>
  <p>In short, the application surfaces data from a backend onto a web page. The client application is a Single Page Application made using AngularJS. It calls an ASP.NET Web API service located on a different domain to retrieve the data. I utilize BreezeJS on both the client application and the web service to manage this data. The client is hosted on a SharePoint Online site, and the service is hosted on IIS7.</p>
  <h3>The Error</h3>
  <p>I encounter an &quot;Access is Denied&quot; error when AngularJS attempts to make an XMLHttpRequest.open() call targeting this web service. However, though this seems like a simple CORS issue, it has some peculiarities which have me stumped:</p>
  <ol>
  <li><p>Foremost, this error only occurs when using Internet Explorer 11 (or a previous version). When the application is viewed in Chrome or Firefox, it can connect and retrieve data from the service.</p>
  </li>
  <li><p>The web service is configured to accept the calling origin.</p>
  </li>
  <li><p>No network traffic is detected either by the native IE development tools or by Fiddler.</p>
  </li>
  </ol>
  <p>Specifically, the line: <code>xhr.open(method, url, true);</code> of the angular.js file throws this error.</p>
  <p>Does anyone have any insight as to why this error occurs?</p>
  <p>Also, if more specific details are needed I certainly can provide them. I'm not even sure where the issue might be coming from and I don't want to dump tons of irrelevant lines of code.</p>