Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

I'm writing an app that will make available a set of api functions that require cross site scripting to work. I'll be utilizing jsonp which will allow other developers to consume these services for their web applications.

  • What security concerns should I consider to protect my server data?
  • What security concerns should other developers take when consuming my services via jsonp?
share|improve this question

1 Answer 1

up vote 2 down vote accepted

Actually, if you still have a chance, you should take a look at CORS (Cross-Origin-Resource-Sharing). It is the W3C specification that is intended to replace the JSONP wrapping workaround, and it went into working draft as recent as April 3, 2012.

So my answer to you, in regards to security, is that you should look at CORS.

Here is the W3C Working Draft Security Considerations link, regarding CORS security and the 'replacement' of JSONP.

share|improve this answer
    
very nice. Thanks! –  coder Jun 26 '12 at 12:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.