Looks good. I highly recommend validation of the callback parameter for security. If you do ...
15 years, 5 months ago
(2010-11-03 00:46:18 UTC)
#2
Looks good.
I highly recommend validation of the callback parameter for security. If you do
not validate this could be used to execute arbitrary javascript in the user's
browser (callback=alert();test for example)
Issue 2829041: Add JSONP support for REST and RPC API
Created 15 years, 5 months ago by bashofmann
Modified 15 years, 5 months ago
Reviewers: plindner1
Base URL: http://svn.apache.org/repos/asf/shindig/trunk/
Comments: 0