[OSM-talk] OpenLayers and Proxy (was :Relation/Routes and Hikes in open Country)
Frederik Ramm
frederik at remote.org
Thu Jun 26 21:25:27 BST 2008
Hi,
Thomas Wood wrote:
> I think you're running into XSS limitations of browsers. You'll
> probably need to proxy the request on the same domain thats hosting
> the page.
Someone talked to me about this at the LinuxTag. He was adamant that our
API should support JSON (in addition to XML) as a return data format. He
said that a JSON message would be valid JavaScript and thus it could be
loaded <script>-like into a JavaScript app, circumventing the
same-origin policy that applies to XmlHttpRequest.
I said why bother, people can easily proxy requests if they want, but he
said that there's a large group of possible users that wouldn't be able
to set up a proxy and for whom a JSON interface would be an absolute
requirement.
I don't even know if there was any merit to his ramblings, technically -
can you really dynamically load JOSN data from other hosts?
Bye
Frederik
--
Frederik Ramm ## eMail frederik at remote.org ## N49°00'09" E008°23'33"
More information about the talk
mailing list