Show HN: Include this JS library to enable cross-origin requests

Re:Show HN: Include this JS library to enable cross-origin r... by drderidder on Monday November 25, 2013 @10:07AM (#6794355)

Please don't use this. JSONP and CORS are the accepted methods for cross origin requests.

[ Parent | on HN ]

Re:Show HN: Include this JS library to enable cross-origin r... by odedgolan on Monday November 25, 2013 @10:09AM (#6794380)

You can only use JSOP and CROS with sites you have control over or are designed to behave and support external requests. It makes it very very limited!

[ Parent | on HN ]

Re:Show HN: Include this JS library to enable cross-origin r... by mkohlmyr on Monday November 25, 2013 @10:19AM (#6794450)

"You can only use JSOP and CROS with sites you have control over or are designed to behave and support external requests."

That's kind of the point.

[ Parent | on HN ]

Re:Show HN: Include this JS library to enable cross-origin r... by odedgolan on Monday November 25, 2013 @10:32AM (#6794544)

It limits the thing you can do. This library allows you to easily get and display content from any external source.

[ Parent | on HN ]

Re:Show HN: Include this JS library to enable cross-origin r... by drderidder on Tuesday November 26, 2013 @12:21AM (#6799316)

Those limits are a security measure to protect against XSS and CSRF. Intentionally weakening your site security isn't a good idea for most people. Your mash up site evidently uses this to get around same origin policy without the cooperation of targeted sites. It would be interesting to know how you plan to mitigate those risks.

[ Parent | on HN ]