Show HN: Include this JS library to enable cross-origin requests

#1

Post by odedgolan » Mon, Nov 25, 2013, 2:16 PM UTC

Show HN: Include this JS library to enable cross-origin requests
github.com

Re: Show HN: Include this JS library to enable cross-origin requests

#2

Post by silasb » Mon, Nov 25, 2013, 2:53 PM UTC

I would let the users know that requests get routed through a server you control.

Re: Show HN: Include this JS library to enable cross-origin requests

#3

Post by Joe8Bit » Mon, Nov 25, 2013, 2:53 PM UTC

Routing all your x-domain requests through an unknown third part via vanilla HTTP? What could possibly go wrong?

Re: Show HN: Include this JS library to enable cross-origin requests

#4

Post by buzzedword » Mon, Nov 25, 2013, 2:54 PM UTC

How is this remotely trending? Yes, HN, let's vote a MITM attack to the frontpage. This is a terrible idea.

Re: Show HN: Include this JS library to enable cross-origin requests

#5

Post by Couto » Mon, Nov 25, 2013, 2:54 PM UTC

Seems a cool idea to use with mockups and prototypes, but an awful idea to use in a serious product.

Re: Show HN: Include this JS library to enable cross-origin requests

#6

Post by Scriptor » Mon, Nov 25, 2013, 2:57 PM UTC

This is just a proxy. If developers wanted to go this route they would set up the proxy on their own server instead of routing it through a 3rd party.

Re: Show HN: Include this JS library to enable cross-origin requests

#7

Post by odedgolan » Mon, Nov 25, 2013, 2:58 PM UTC

silasb wrote: post #2

I would let the users know that requests get routed through a server you control.

It only goes through our servers if it's cross-origin. Normal http same-origin requests are left intact (and you can see it in the code). It's stated on the README but perhaps it should be more apparent.

Re: Show HN: Include this JS library to enable cross-origin requests

#8

Post by untog » Mon, Nov 25, 2013, 2:58 PM UTC

Overwhelmingly terrible idea. Routing your web site traffic through an entirely unknown third party server. Overwrite the global XMLHttpRequest object.

Please tell me this is a joke to show off terrible security practise?

Re: Show HN: Include this JS library to enable cross-origin requests

#9

Post by odedgolan » Mon, Nov 25, 2013, 3:00 PM UTC

Scriptor wrote: post #6

This is just a proxy. If developers wanted to go this route they would set up the proxy on their own server instead of routing it through a 3rd party.

It's possible, we just make it easier. This library also make it seamless (you can still use jQuery.ajax). They can use this library and just change the proxy url.

Re: Show HN: Include this JS library to enable cross-origin requests

#10

Post by necenzurat » Mon, Nov 25, 2013, 3:01 PM UTC

buzzedword wrote: post #4

How is this remotely trending? Yes, HN, let's vote a MITM attack to the frontpage. This is a terrible idea.

because why not?