Reputation
419
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 10
Impact
~8k people reached

  • 0 posts edited
  • 0 helpful flags
  • 42 votes cast
May
14
awarded  Popular Question
Mar
21
awarded  Yearling
Feb
7
awarded  Custodian
Feb
7
reviewed Needs Improvement Better php framework for shared hosting
Jan
14
asked Handling table name collisions in Django
Jan
6
awarded  Yearling
Jul
21
accepted Keeping “historical” migrations in Django-south
Jul
21
comment Parameterized Django models
Thanks, that really makes more sense. Afterall, if I'm creating a reusable component, it might well be possible I want to use it more than once in the same project, so if I made the customizations at the base classes that would limit what I can do to them afterwards. However, I think it's better to keep the base models concrete, since the whole point is having a framework of related models, and I can't set foreign keys to an abstract model.
Jul
21
accepted Parameterized Django models
Jul
17
asked Keeping “historical” migrations in Django-south
May
31
awarded  Tumbleweed
May
24
asked Parameterized Django models
May
24
revised Python flavor of regular expressions - related to which?
added 36 characters in body
May
24
answered Python flavor of regular expressions - related to which?
May
22
comment Means for (legit) cross-site scripting
Accepted, since it's in fact the right answer to how perform cross-domain requests. But for anyone interested in the security implications of it, see also this question at security.SE. In short, JSONP can be made safer by using a dedicated iframe for it, but sandboxed to allow scripting but deny top level navigation and same origin benefits.
May
22
accepted Means for (legit) cross-site scripting
May
18
awarded  Commentator
May
18
comment Means for (legit) cross-site scripting
@DanDiplo (and Tom Squires) thanks for the JSONP suggestion. Unfortunatly, that was not what I meant with my question (see the update). I'm not a native English speaker, and may have given a bad title to it... ("cross-site scripting" refer only to http requests?)
May
18
comment Means for (legit) cross-site scripting
@FlorianMargaine I didn't know that, thanks! What about the converse, can the parent page access the iframe's contents? (DOM, js environment) Or is the relation between them the same as, say, two tabs on the same browser? (in which case I'd have to use something like postMessage to make the communication work)
May
18
revised Means for (legit) cross-site scripting
added 700 characters in body