CSSHttpRequest is cross-domain AJAX using CSS

by fsniper • 17 years ago

43 7 17 years ago

kwamenum862• 17 years ago

I have always thought this project is interesting but why use it over JSONP? For starters, JSONP is as close as you can get to be a standard for cross-browser scripting. Additionally, it seems somewhat clumsy and there has got to be some limitation on the information the data URI scheme can communicate. I have always admired the other though because I think this is an extremely clever hack.

csytan• 17 years ago

This seems to be the main advantage:

"Unlike JSONP, untrusted third-party JavaScript cannot execute in the context of the calling page."

Edit: It looks like they create an iframe, load the css, and parse the data using javascript, so it seems to be fairly safe.

kwamenum862• 17 years ago

You could just not make js requests to untrusted 3rd parties...but point taken...sort of

qeorge• 17 years ago

Executing "untrusted" 3rd party JavaScript in the context of the calling page is the whole point of JSONP.

Cool hack, but I don't see where this is useful.

mikeytown2• 17 years ago

I can't think of a use case for this, but it's still really cool.

kitcar• 17 years ago

Could either CSSHttpRequest or JSONP be used to determine what URL an iFrame contains? (assuming the user has navigated within the iFrame beyond the initial page defined in the iFrame property)

CSSHttpRequest is cross-domain AJAX using CSS

Related Stories