[whatwg] JSONRequest

Henri Sivonen hsivonen at iki.fi
Thu Mar 30 07:19:19 PST 2006


On Mar 30, 2006, at 17:21, Douglas Crockford wrote:

> The central idea with the JSONRequest is that it is exempted from  
> the Same Origin Policy. It allows for exchanging data with a server  
> in any domain that specifically accepts JSONRequests.

Why is it necessary to allow this in the browser? When would you be  
able actually use the feature even if Opera, Apple and Mozilla  
shipped support today?

What's wrong with having the browser talking to the origin server  
using XMLHttpRequest and the server talking to the third party  
(sanitizing data as necessary before passing it to the browser)?

-- 
Henri Sivonen
hsivonen at iki.fi
http://hsivonen.iki.fi/





More information about the whatwg mailing list