Comments on: Sandbox Your Cross Domain JSONP To Improve Mashup Security http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/ The News about the Easiest and Fastest Timesheet Sat, 18 Feb 2012 19:15:21 +0000 hourly 1 http://wordpress.org/?v=3.3 By: pozycjonowanie wroclaw http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-1311 pozycjonowanie wroclaw Sun, 12 Feb 2012 20:12:46 +0000 http://beebole.com/blog/?p=530#comment-1311 <strong>Hmm...</strong> I want to thank you for the outstanding post!! I undoubtedly liked every bit of it. I’ve bookmarked your internet web site so I can take a appear at the latest articles you post later on.... Hmm…

I want to thank you for the outstanding post!! I undoubtedly liked every bit of it. I’ve bookmarked your internet web site so I can take a appear at the latest articles you post later on….

]]> By: Get Your IP with JQuery « Tournas Dimitrios http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-283 Get Your IP with JQuery « Tournas Dimitrios Mon, 26 Dec 2011 09:27:35 +0000 http://beebole.com/blog/?p=530#comment-283 [...] the request is treated as JSONP. JSONP comes with its own set of security risks . Read this article to explore ways to minimize this risks . Note: As of jQuery 1.5 , all of jQuery’s Ajax [...] [...] the request is treated as JSONP. JSONP comes with its own set of security risks . Read this article to explore ways to minimize this risks . Note: As of jQuery 1.5 , all of jQuery’s Ajax [...]

]]> By: Mic http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-217 Mic Thu, 16 Sep 2010 09:49:05 +0000 http://beebole.com/blog/?p=530#comment-217 @Nathan, Thanks for pointing it. For modern browsers, you should switch to the standard functionality of window.postMessage The sandboxing described here stays ok, except this difference in the way the message is passed between frames. @Nathan, Thanks for pointing it.
For modern browsers, you should switch to the standard functionality of window.postMessage
The sandboxing described here stays ok, except this difference in the way the message is passed between frames.

]]> By: Nathan http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-216 Nathan Wed, 15 Sep 2010 11:21:36 +0000 http://beebole.com/blog/?p=530#comment-216 The latest version of Firefox (3.6.9) throws "permission denied for [my test url] to get property Window.name" The latest version of Firefox (3.6.9) throws “permission denied for [my test url] to get property Window.name”

]]> By: Mic http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-215 Mic Tue, 27 Jan 2009 16:59:20 +0000 http://beebole.com/blog/?p=530#comment-215 Hi Kris, Thanks for the nice comment. http://beebole-sandbox.com is a small server just as an example. There is another implementation hosted on Google App Engine: http://beebole-sandbox.appspot.com For a reliable service this could be a better option. We've added the source code of it at http://github.com/beebole/sandbox if some people are interested to participate. Hi Kris,
Thanks for the nice comment.
http://beebole-sandbox.com is a small server just as an example.

There is another implementation hosted on Google App Engine:
http://beebole-sandbox.appspot.com
For a reliable service this could be a better option.

We’ve added the source code of it at http://github.com/beebole/sandbox if some people are interested to participate.

]]> By: Kris Zyp http://beebole.com/blog/general/sandbox-your-cross-domain-jsonp-to-improve-mashup-security/#comment-214 Kris Zyp Tue, 27 Jan 2009 14:07:45 +0000 http://beebole.com/blog/?p=530#comment-214 Great work, this is a very clever use of window.name, I'm impressed. Are you offering the JSONP - window.name translation from http://beebole-sandbox.com/ as a service for others to use, or just as an example? Great work, this is a very clever use of window.name, I’m impressed. Are you offering the JSONP – window.name translation from http://beebole-sandbox.com/ as a service for others to use, or just as an example?

]]>