you can use it as a proxy too http://korz.tomodo.me/http://news.ycombinator.com
Show HN: Include this JS library to enable cross-origin requests
11–20 of 33 posts
Re: Show HN: Include this JS library to enable cross-origin requests
#12How is this remotely trending? Yes, HN, let's vote a MITM attack to the frontpage. This is a terrible idea.
Yes it allows you to do back stuff. But it also allows great things as mashups, retrieving external content easily etc.
Re: Show HN: Include this JS library to enable cross-origin requests
#13Seems a cool idea to use with mockups and prototypes, but an awful idea to use in a serious product.
Why? remember your product will function exactly the same. It just makes more thing possible.
Re: Show HN: Include this JS library to enable cross-origin requests
#14Please don't use this. JSONP and CORS are the accepted methods for cross origin requests.
Re: Show HN: Include this JS library to enable cross-origin requests
#15Routing all your x-domain requests through an unknown third part via vanilla HTTP? What could possibly go wrong?
It's just your cross-origin traffic, which is not possible without this library, everything else will behave exactly the same.
Re: Show HN: Include this JS library to enable cross-origin requests
#16Please don't use this. JSONP and CORS are the accepted methods for cross origin requests.
You can only use JSOP and CROS with sites you have control over or are designed to behave and support external requests. It makes it very very limited!
Re: Show HN: Include this JS library to enable cross-origin requests
#17Seems a cool idea to use with mockups and prototypes, but an awful idea to use in a serious product.
Why? remember your product will function exactly the same. It just makes more thing possible.
No, it will not function exactly the same, because it sends stuff through your server. That is a very important difference.
Leaving my front door open when I'm on holiday also makes more things possible. That does not mean I will like those things.
Re: Show HN: Include this JS library to enable cross-origin requests
#18Overwhelmingly terrible idea. Routing your web site traffic through an entirely unknown third party server. Overwrite the global XMLHttpRequest object. Please tell me this is a joke to show off terrible security practise?
Regrading overwriting XMLHttpRequest, if it works - it works, and if it breaks it can be improved, this is why it is open source.
It does not reroute your site traffic just your cross-origin site traffic, which practically does not exist without this library. Yes it can be used to do bad thing but also opens up the opportunity for mashups, external content integration, api calls and more.
Re: Show HN: Include this JS library to enable cross-origin requests
#19Earlier quoted context omitted.
Why? remember your product will function exactly the same. It just makes more thing possible.
No, it will not function exactly the same, because it sends stuff through your server. That is a very important difference. Leaving my front door open when I'm on holiday also makes more things possible. That does not mean I will like those things.
If you are working on super sensitive website for the NSA, I totally agree. YOU SHOULDN'T USE IT.
But if you have a blog and you would like to constantly display some specific content from a different webpage via ajax it seems like the easiest & most simple solution.
Re: Show HN: Include this JS library to enable cross-origin requests
#20Please don't use this. JSONP and CORS are the accepted methods for cross origin requests.
You can only use JSOP and CROS with sites you have control over or are designed to behave and support external requests. It makes it very very limited!
"You can only use JSOP and CROS with sites you have control over or are designed to behave and support external requests."
That's kind of the point.