Hi,

Thomas Wood wrote:
> I think you're running into XSS limitations of browsers. You'll
> probably need to proxy the request on the same domain thats hosting
> the page.

Someone talked to me about this at the LinuxTag. He was adamant that our 
API should support JSON (in addition to XML) as a return data format. He 
said that a JSON message would be valid JavaScript and thus it could be 
loaded <script>-like into a JavaScript app, circumventing the 
same-origin policy that applies to XmlHttpRequest.

I said why bother, people can easily proxy requests if they want, but he 
said that there's a large group of possible users that wouldn't be able 
to set up a proxy and for whom a JSON interface would be an absolute 
requirement.

I don't even know if there was any merit to his ramblings, technically - 
can you really dynamically load JOSN data from other hosts?

Bye
Frederik

-- 
Frederik Ramm  ##  eMail [EMAIL PROTECTED]  ##  N49°00'09" E008°23'33"

_______________________________________________
talk mailing list
talk@openstreetmap.org
http://lists.openstreetmap.org/cgi-bin/mailman/listinfo/talk

Reply via email to