Suppose your app is hosted at: foo.bar.com/myapp/ and dataface is hosted at bar.com/dataface , I think you'll still run into javascript security problems.
If your app is at foo.bar.com/myapp/ then the dataface url must be at foo.bar.com .
By symbolic links, i mean: If you are using a unix based system, you can create a symbolic link as follows:
ln -s /path/to/source/file /path/to/link
It is much like the cp command except that it only creates a link. You could use this to create links to the dataface directory that would appear in the directory tree of the domain in question.
On my system I often create a link to dataface inside the app's directory.
i.e.
/path/to/app/
+---- dataface/ <---- This is a symbolic link to the actual dataface directory.
This would resolve any issues.
If you don't have shell access to be able to create symbolic links, you can achieve the same results using .htaccess files:
http://httpd.apache.org/docs/2.0/mod/mod_alias.htmlHope this helps a little.
-Steve