Re: ERRest and JSONP?
Re: ERRest and JSONP?
- Subject: Re: ERRest and JSONP?
- From: Jesse Tayler <email@hidden>
- Date: Mon, 19 Mar 2012 20:10:27 -0400
I can see that JSONP is basically just some padding that makes it resemble executable javascript, thus I presume stoking the heap with your properties.
I hear that the window.name trick has been deprecated on some newer browsers and no longer works?
I don't know about such things, but, I did read a bit here https://developer.mozilla.org/En/HTTP_Access_Control
also -- foursquare and google seem to use jsonp extensively - so, I'm not sure why that is.
can anyone point me to anywhere I might learn more about this?
On Mar 19, 2012, at 7:58 PM, Pascal Robert <email@hidden> wrote:
>
> Le 2012-03-19 à 15:55, Jesse Tayler a écrit :
>
>> Yes, I was reading that earlier.
>>
>> It seems some suggest jsonp has security issues, but what if a UI programmer really prefers jsonp?
>
> I don't know why someone would prefer JSONP than Same Origin Policy, who don't require anything on the client side (you only need something server-side to be able to answer the OPTIONS request).
>
>> Has anyone implemented it or has advice or how I should redirect the technique were using for the ui here?
>
> I guess JSONP would have to implemented like the window.name support.
>
>>
>>
>> Sent from my iPad
>>
>> On Mar 19, 2012, at 3:41 PM, Pascal Robert <email@hidden> wrote:
>>
>>> Because nobody added support for it :-) The only thing ERRest supports right now is Same Policy Origin and window.name:
>>>
>>> http://wiki.wocommunity.org/display/WONDER/ERRest+Framework#ERRestFramework-SameOriginpolicy
>>>
>>>> Isn't jsonp easy to support via Errest?
>>>>
>>>> Security problem?
>>>>
>>>> What to do when we have a JavaScript that must run on external domains?
>>>>
>>>> Seems that jsonp is what is used most and it seems like a js wrapper that should be easy to put in?
>>>>
>>>> Sent from my iPad
>>>> _______________________________________________
>>>> Do not post admin requests to the list. They will be ignored.
>>>> Webobjects-dev mailing list (email@hidden)
>>>> Help/Unsubscribe/Update your Subscription:
>>>>
>>>> This email sent to email@hidden
>>>
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden