Support Multi-Site Scripting via Cross-Origin Resource Sharing
--------------------------------------------------------------
Key: STANBOL-105
URL: https://issues.apache.org/jira/browse/STANBOL-105
Project: Stanbol
Issue Type: New Feature
Components: Enhancer, Entity Hub, KReS
Reporter: Rupert Westenthaler
See http://www.w3.org/TR/cors/ for the specification and
https://developer.mozilla.org/En/HTTP_Access_Control describes a nice
description with examples.
basically if http://example.com needs to request the stambol server running at
http://stanbol.demo.org
than the header will include
GET /resources/public-data/ HTTP/1.1
Host: http://stanbol.demo.org
Accept: application/rdf+json
Origin: http://example.com
and the response needs to include
Access-Control-Allow-Origin: *
telling the browser that it can use the returned data with any other domain.
For requests other than GET and POST (with content types !=
application/x-www-form-urlencoded, multipart/form-data, or text/plain) one need
to use Preflighted requests (something more complex because is requires the
use of an additional OPTIONS request).
This would be an replacement for the request to implement JSONP. In addition it
is based on an official specification by W3C and it supports all HTTP request
types.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
