[twitter-dev] Re: Cross-domain policy file

2010-10-20 Thread zeh fernando
MySpace - allows all domains http://api.myspace.com/crossdomain.xml On Oct 19, 10:53 am, zeh fernando wrote: > Thanks for the support Orian. I really want to understand why Twitter > is blocking that kind of cross-domain requests, as I believe it just > makes things more difficult, without really

[twitter-dev] Re: Cross-domain policy file

2010-10-19 Thread zeh fernando
Thanks for the support Orian. I really want to understand why Twitter is blocking that kind of cross-domain requests, as I believe it just makes things more difficult, without really blocking what one would consider a "security issue". On Oct 19, 3:10 am, "Orian Marx (@orian)" wrote: > Zeh, thank

[twitter-dev] Re: Cross-domain policy file

2010-10-19 Thread Orian Marx (@orian)
Zeh, thanks for taking the time to bring this issue to light again and to present so many examples of other significant APIs that do not have restrictive crossdomain policies. As you note, this issue has been brought to Twitter's attention several times over the last few years but to no avail. For

[twitter-dev] Re: Cross-domain policy file

2010-10-18 Thread zeh fernando
Yahoo! maps APIs - allows all domains http://local.yahooapis.com/crossdomain.xml Yahoo! search APIs - allows all domains http://search.yahooapis.com/crossdomain.xml On Oct 18, 3:34 pm, zeh fernando wrote: > Does Twitter have any plans on when/whether they'll change its current > cross-domain pol

[twitter-dev] Re: Cross-domain policy file

2010-10-18 Thread zeh fernando
Just to add some other examples of popular API domains: Youtube API cross-domain policies - allow connections from all (real) domains http://gdata.youtube.com/crossdomain.xml Google search APIs - allow conection from all domains http://ajax.googleapis.com/crossdomain.xml Ebay APIs - allow connec