Re:Show HN: Include this JS library to enable cross-origin r...
by odedgolan on Monday November 25, 2013 @10:32AM
(#6794544)
It limits the thing you can do. This library allows you to easily get and display content from any external source.
[ Parent
| on HN ]
Re:Show HN: Include this JS library to enable cross-origin r...
by drderidder on Tuesday November 26, 2013 @12:21AM
(#6799316)
Those limits are a security measure to protect against XSS and CSRF. Intentionally weakening your site security isn't a good idea for most people. Your mash up site evidently uses this to get around same origin policy without the cooperation of targeted sites. It would be interesting to know how you plan to mitigate those risks.