[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Cross-domain loading of XML

  • From: Kurt Cagle <kurt.cagle@gmail.com>
  • To: David Lee <dlee@calldei.com>
  • Date: Wed, 8 Dec 2010 20:06:00 -0500

Re:  Cross-domain loading of XML
David,

There's a reason JavaScript web developers are often called script kiddies ... formalisms are often wasted on them. There's a great deal of nudge,nudge, wink, wink in the AJAX world. 

Kurt Cagle
XML Architect
Lockheed / US National Archives ERA Project



On Wed, Dec 8, 2010 at 5:01 PM, David Lee <dlee@calldei.com> wrote:
Reading this it doesn’t seem to be limited to JSON at all.
Its *Javascript" not JSON specific.
You could easily pass XML if you wanted as long as it was encoded as a JSON object/value (such as a string).
surrounded by a function.

But thanks for the link.  Now I know why my web developer colleges used this what I called then "JJSON" (JavaScript Wrapped JSON ) format and called it "JSON".
My response was "That’s not even JSON !!! Whats this JavaScript function doing in the DATA !"

When asked why it had to include a Javascript method instead of pure data all I got was hand-waving and finger pointing.
Now I know why !



----------------------------------------
David A. Lee
dlee@calldei.com
http://www.xmlsh.org


-----Original Message-----
From: Mike Sokolov [mailto:sokolov@ifactory.com]
Sent: Wednesday, December 08, 2010 9:21 AM
To: Elliotte Rusty Harold
Cc: Rob Koberg; Uche Ogbuji; Michael Kay; xml-dev@lists.xml.org
Subject: Re: Cross-domain loading of XML


This article gives a pretty good explanation:

http://www.ibm.com/developerworks/library/wa-aj-jsonp1/

The gist is that XMLHttpRequest is limited to same-domain urls.

However there is a workaround for JSON (they call it JSONP) that uses
the ability to load javascript dynamically from another domain.
Essentially, it seems you can bypass the cross-domain restriction by
this trick:

var script = document.createElement('script');
script.setAttribute('src', url);

Apparently in this instance url doesn't have to be a url on the same domain.

I don't see why this couldn't be used to insert any sort of data at all,
but it does rely on javascript.

-Mike

On 12/08/2010 08:08 AM, Elliotte Rusty Harold wrote:
> On Tue, Dec 7, 2010 at 7:15 PM, Rob Koberg<rob@koberg.com>  wrote:
>
>
>> First thing: Get the browser builders to allow cross domain loading of
>> XML. Without that you might as just bang your head on a post. (even
>> with that, you will just be banging your head on a padded post)
>>
> Just want to double check this. JSON can be loaded cross-domain and
> XML can't, right? I.e. I can eval JSON from an arbitrary host in my
> browser-based JavaScript and I can't load XML using XmlHTTPRequest
> unless it comes from the same host? Or is it more subtle than that? If
> so, is there a detailed analysis somewhere of exactly under what
> conditions I can load JSON from where and how?
>
> Googling around I see some blog posts, but no detailed analysis.
>
>

_______________________________________________________________________

XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.

[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
subscribe: xml-dev-subscribe@lists.xml.org
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php


_______________________________________________________________________

XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.

[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
subscribe: xml-dev-subscribe@lists.xml.org
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index]


PURCHASE STYLUS STUDIO ONLINE TODAY!

Purchasing Stylus Studio from our online shop is Easy, Secure and Value Priced!

Buy Stylus Studio Now

Download The World's Best XML IDE!

Accelerate XML development with our award-winning XML IDE - Download a free trial today!

Don't miss another message! Subscribe to this list today.
Email
First Name
Last Name
Company
Subscribe in XML format
RSS 2.0
Atom 0.3
 

Stylus Studio has published XML-DEV in RSS and ATOM formats, enabling users to easily subcribe to the list from their preferred news reader application.


Stylus Studio Sponsored Links are added links designed to provide related and additional information to the visitors of this website. they were not included by the author in the initial post. To view the content without the Sponsor Links please click here.

Site Map | Privacy Policy | Terms of Use | Trademarks
Free Stylus Studio XML Training:
W3C Member
Stylus Studio® and DataDirect XQuery ™are products from DataDirect Technologies, is a registered trademark of Progress Software Corporation, in the U.S. and other countries. © 2004-2013 All Rights Reserved.