Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm writing an app that will make available a set of api functions that require cross site scripting to work. I'll be utilizing jsonp which will allow other developers to consume these services for their web applications.

  • What security concerns should I consider to protect my server data?
  • What security concerns should other developers take when consuming my services via jsonp?
share|improve this question
up vote 2 down vote accepted

Actually, if you still have a chance, you should take a look at CORS (Cross-Origin-Resource-Sharing). It is the W3C specification that is intended to replace the JSONP wrapping workaround, and it went into working draft as recent as April 3, 2012.

So my answer to you, in regards to security, is that you should look at CORS.

Here is the W3C Working Draft Security Considerations link, regarding CORS security and the 'replacement' of JSONP.

share|improve this answer
very nice. Thanks! – coder Jun 26 '12 at 12:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.