Timeline for What is the point of the same-domain rule for xmlhttprequest when script tags/JSONP can cross domains?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 31, 2022 at 16:14 | comment | added | XP84 | Many years later, and with the benefit of more learning, I wanted to point out for anyone who sees this later that while you could use JSONP, the only way to do so is for the site on the server side of that request to choose to send a JSONP response, and given how it could be abused, it's probably a bad idea to use JSONP for anything where security matters. Good for allowing anyone to get free weather data, super duper bad for anything to do with money/PII :) - Although with modern CORS headers being so easy, probably not worth bothering with JSONP ever anymore! | |
| Jan 29, 2015 at 17:13 | answer | added | Eph | timeline score: 0 | |
| S Dec 26, 2013 at 20:47 | history | bounty ended | CommunityBot | ||
| S Dec 26, 2013 at 20:47 | history | notice removed | CommunityBot | ||
| S Dec 18, 2013 at 19:34 | history | bounty started | Martin Jambon | ||
| S Dec 18, 2013 at 19:34 | history | notice added | Martin Jambon | Canonical answer required | |
| Mar 25, 2012 at 17:15 | history | edited | AviD♦ |
edited tags
|
|
| Mar 23, 2012 at 18:15 | answer | added | D.W. | timeline score: 20 | |
| Mar 23, 2012 at 17:38 | history | tweeted | twitter.com/#!/StackSecurity/status/183246458605150208 | ||
| Mar 23, 2012 at 17:00 | history | migrated | from stackoverflow.com (revisions) | ||
| Mar 23, 2012 at 15:19 | answer | added | SilverlightFox | timeline score: 2 | |
| Mar 23, 2012 at 1:12 | history | asked | XP84 | CC BY-SA 3.0 |