[OSM-talk] OpenLayers and Proxy (was :Relation/Routes and Hikes in open Country)

Frederik Ramm frederik at remote.org
Thu Jun 26 21:25:27 BST 2008


Hi,

Thomas Wood wrote:
> I think you're running into XSS limitations of browsers. You'll
> probably need to proxy the request on the same domain thats hosting
> the page.

Someone talked to me about this at the LinuxTag. He was adamant that our 
API should support JSON (in addition to XML) as a return data format. He 
said that a JSON message would be valid JavaScript and thus it could be 
loaded <script>-like into a JavaScript app, circumventing the 
same-origin policy that applies to XmlHttpRequest.

I said why bother, people can easily proxy requests if they want, but he 
said that there's a large group of possible users that wouldn't be able 
to set up a proxy and for whom a JSON interface would be an absolute 
requirement.

I don't even know if there was any merit to his ramblings, technically - 
can you really dynamically load JOSN data from other hosts?

Bye
Frederik

-- 
Frederik Ramm  ##  eMail frederik at remote.org  ##  N49°00'09" E008°23'33"




More information about the talk mailing list