Comments on: Look Ma, Cross-Domain Scripting!

By: Jan

Jan — Mon, 11 Oct 2010 14:49:28 +0000

cornwell is right in what he’s saying, but it’s hard to understand ;-). To get this workin’ simple try to add the parameter “?a=b” to the JSONscriptRequest-URL.

By: Mckenzie's hima time » cross domain scripting

Mckenzie's hima time » cross domain scripting — Tue, 27 Apr 2010 21:38:54 +0000

[...] @ borkweb offers this javascript class example:here Categories: Code, php Tags: cross domain, php, programming, script Comments (0) [...]

By: Dustin

Dustin — Tue, 18 Aug 2009 12:57:54 +0000

That was supposed to be our site http://www.hotelspy.com by the way…sorry for the typo.

By: Dustin

Dustin — Tue, 18 Aug 2009 12:27:34 +0000

This is a great script, but what I have a question. We are trying to do is have users access our site http://www.htotelspy.com but be logged in even though they are coming to us from a link on our site http://www.superads.com. If we use this JSON solution is the hotelspy.com content going to be indexable in the search engines?

By: sue

sue — Tue, 09 Jun 2009 14:17:15 +0000

Hi,

I tried this code exactly as it is mentioned in the above example (using yahoo url), but it is just outputting the URL that I am providing in remote_file.php. Not returning the actual html source.

What should I do?

By: vikas

vikas — Tue, 31 Mar 2009 09:54:00 +0000

Guys,
I think most of you are not realising that this has nothing to do with json.
All you need to do is call a server file and return a javascript like file.
So if you want xml all you need to do is return

var xmltext=”"

By: George

George — Mon, 30 Mar 2009 14:28:50 +0000

It’s working for me now.

As cornwell said, you have to put something like ‘&a=b’ behind the URL. Without that it does not work.

The function ‘bork’ is called by the remote_file.php itself after it has been included in the head of the code.

By: hans guth

hans guth — Mon, 16 Feb 2009 22:27:07 +0000

Thanks – great article – just getting into using json with google maps. My question? Why is the funtion bork never used in this example – to my seeing at least? Am I missing something? Thanks much…

By: Kyle Simpson

Kyle Simpson — Sat, 27 Sep 2008 18:56:00 +0000

The problem I have with a technique like this is the amount of hoops you have to jump through to control who can and cannot get to content cross-domain.

Enter: flXHR (pronounced flex-er) http://flxhr.flensed.com/

It’s a javascript+flash combination that uses an invisible swf instance to act as a proxy and leverage Adobe’s server-opt-in model for crossdomain.xml policies to allow authorized cross-domain communication.

flXHR implements an identical API to the normal native XHR, which makes it a super-easy drop-in replacement, meaning it can effortlessly be used with any number of various JS frameworks that already know how to speak XHR API.

It’s client-side cross-domain, without all the hassle, and with much more reliability.

By: XSS

XSS — Sat, 30 Aug 2008 14:32:37 +0000

[...] B was running from host A and doing an XHTTPRequest request to host B. So what to do? Well I found this article on using JSON to do cross domain scripting (and here is even more background) but it [...]