[android-developers] Re: Ajax cross domain requests

2010-11-14 Thread metal mikey
Use it for dDOS? That'a s little far-fetched...moonwhile, its CSRF abuse that becomes the real problem here. On Nov 14, 10:41 am, ff fabio.fo...@gmail.com wrote: On Nov 8, 8:32 pm, Frank Weiss fewe...@gmail.com wrote: Not sure if you're just complainig about the error handling. I suppose you

[android-developers] Re: Ajax cross domain requests

2010-11-13 Thread ff
On Nov 8, 8:32 pm, Frank Weiss fewe...@gmail.com wrote: Not sure if you're just complainig about the error handling. I suppose you know that JSONP does cross-domain and is supported by jQuery.ajax. Yep, the error handling is wrong and dangerous since the browser actually sends the request