Timeline for Is it safe to call an untrusted service with jquery.ajax and dataType 'jsonp'
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 16, 2019 at 8:07 | history | edited | Anders |
edited tags
|
|
| Jul 11, 2014 at 8:08 | vote | accept | oberlies | ||
| Jul 11, 2014 at 5:36 | history | tweeted | twitter.com/#!/StackSecurity/status/487470349412757504 | ||
| Jul 10, 2014 at 18:00 | comment | added | Andrew Hoffman | json-p is essentially XSSing yourself, and I honestly wouldn't be surprised if the browsers shut it down in the future. If you want to use an external api, don't even subdomain them, just do mydomain.com/facebook/ and redirect that route to the service. | |
| Jul 10, 2014 at 16:19 | review | First posts | |||
| Jul 10, 2014 at 16:28 | |||||
| Jul 10, 2014 at 16:16 | answer | added | paj28 | timeline score: 3 | |
| Jul 10, 2014 at 16:10 | history | edited | oberlies | CC BY-SA 3.0 |
add more links
|
| Jul 10, 2014 at 16:04 | history | asked | oberlies | CC BY-SA 3.0 |