I can see that JSONP is basically just some padding that makes it resemble executable javascript, thus I presume stoking the heap with your properties.
I hear that the window.name trick has been deprecated on some newer browsers and no longer works? I don't know about such things, but, I did read a bit here https://developer.mozilla.org/En/HTTP_Access_Control also -- foursquare and google seem to use jsonp extensively - so, I'm not sure why that is. can anyone point me to anywhere I might learn more about this? On Mar 19, 2012, at 7:58 PM, Pascal Robert <[email protected]> wrote: > > Le 2012-03-19 à 15:55, Jesse Tayler a écrit : > >> Yes, I was reading that earlier. >> >> It seems some suggest jsonp has security issues, but what if a UI programmer >> really prefers jsonp? > > I don't know why someone would prefer JSONP than Same Origin Policy, who > don't require anything on the client side (you only need something > server-side to be able to answer the OPTIONS request). > >> Has anyone implemented it or has advice or how I should redirect the >> technique were using for the ui here? > > I guess JSONP would have to implemented like the window.name support. > >> >> >> Sent from my iPad >> >> On Mar 19, 2012, at 3:41 PM, Pascal Robert <[email protected]> wrote: >> >>> Because nobody added support for it :-) The only thing ERRest supports >>> right now is Same Policy Origin and window.name: >>> >>> http://wiki.wocommunity.org/display/WONDER/ERRest+Framework#ERRestFramework-SameOriginpolicy >>> >>>> Isn't jsonp easy to support via Errest? >>>> >>>> Security problem? >>>> >>>> What to do when we have a JavaScript that must run on external domains? >>>> >>>> Seems that jsonp is what is used most and it seems like a js wrapper that >>>> should be easy to put in? >>>> >>>> Sent from my iPad >>>> _______________________________________________ >>>> Do not post admin requests to the list. They will be ignored. >>>> Webobjects-dev mailing list ([email protected]) >>>> Help/Unsubscribe/Update your Subscription: >>>> https://lists.apple.com/mailman/options/webobjects-dev/probert%40macti.ca >>>> >>>> This email sent to [email protected] >>> > _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list ([email protected]) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to [email protected]
