Show HN: Include this JS library to enable cross-origin requests

Re:Show HN: Include this JS library to enable cross-origin r... by odedgolan on Monday November 25, 2013 @10:07AM (#6794361)

It's just your cross-origin traffic, which is not possible without this library, everything else will behave exactly the same.

[ Parent | on HN ]

Re:Show HN: Include this JS library to enable cross-origin r... by Joe8Bit on Monday November 25, 2013 @12:27PM (#6795411)

And whoever is running this proxy will _promise_ not to log any sensitive information (API keys not the least) or otherwise use/modify the response for their own ends?

Not to mention that the API endpoint is HTTP only, meaning everything is broadcast in the clear.

Also, cross origin requests are perfectly possible without this library, it's precisely why we use JSONP and CORS.

When it comes to security, this library is a collection of anti-patterns. As well as the JS anti-pattern of not overwriting native objects, such as XMLHttpRequest in this context.

[ Parent | on HN ]