You forgot option 4 which is generally the right way to solve this problem. Create a whitelist proxy on your server that makes the request to googleapis on behalf of the user and returns the correct script. This is a fairly trivial thing to implement in any host language and googling php proxy or java proxy can get you very close. The important thing is to not make it an open proxy - and use indirect references to proxy the requests. So the src attribute in your script might look like this:
/myapp/scriptloader?script=jq The proxy maps the key jq to a URL and makes a request to that URL returning the result of the proxies request. Sent from my iPwn On Mar 2, 2011, at 9:34 AM, Adam Nelson <a...@yipit.com> wrote: > As many of you probably know, turning IE8 to high security mode disables the > use of third party domain hosted js files. By default, all Windows Server > installations will be in high security mode as well as an unknown percentage > of XP/Vista/7 users. > > My question is whether people recommend: > > 1. Ignoring the issue and simply use googleapis.com > 2. Creating a CNAME on my domain that points to googleapis.com > 3. Going through the trouble of creating a degraded experience for users > without js > > Does anybody know the percent of users in the wild running in high security > mode without the wherewithal to whitelist googleapis.com? Have other people > chosen one of these options? Choosing #2 is trivial to implement and helps > out those users at the expense of not allowing anybody to have a precached > copy of the jQuery library before they visit my site. > > Cheers, > Adam > -- > You received this message because you are subscribed to the Google Groups > "Google AJAX APIs" group. > To post to this group, send email to google-ajax-search-api@googlegroups.com. > To unsubscribe from this group, send email to > google-ajax-search-api+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/google-ajax-search-api?hl=en. -- You received this message because you are subscribed to the Google Groups "Google AJAX APIs" group. To post to this group, send email to google-ajax-search-api@googlegroups.com. To unsubscribe from this group, send email to google-ajax-search-api+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-ajax-search-api?hl=en.
