The
same origin policy prevents it. It is to keep sites from contacting your bank, email, etc.
If the external site is under your control and you only care about modern day browsers, you can look into
CORS.
If the site is not, only way around it is a serverside proxy on your server to fetch the content.
In reality, synchronous calls are a bad idea since they lock up the browser.
Eric