diff -r 000000000000 -r 40c8f766c9b8 src/cm/media/js/lib/yui/yui3.0.0/examples/get/get-script-basic_clean.html --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/src/cm/media/js/lib/yui/yui3.0.0/examples/get/get-script-basic_clean.html Mon Nov 23 15:14:29 2009 +0100 @@ -0,0 +1,242 @@ + + + + + +Getting a Script Node with JSON Data + + + + + + + + + + + + + + + +

Getting a Script Node with JSON Data

+ +
+

This example employs the YUI +Get Utility in a simple use case: retrieving JSON data from a cross-domain +web service. While this is a relatively common usage, it's important to +understand the security ramifications of this technique. Scripts loaded via the +Get Utility (or any other "script node" solution) execute immediately +once they are loaded. If you do not fully control (or fully trust) the script's +source, this is not a safe technique and it can put the security of your users' +data at risk. (For more information on the dangers of cross-site scripting +[XSS] exploits, check out the +Wikipedia entry on this subject.)

Here, we will use a trusted Yahoo! +Search web service called Site +Explorer to return a list of inbound links for a given URL. The principal +difference between this example and similar examples using YUI IO Utility is +that this technique does not require a server-side proxy. The browser connects +directly to the third-party web service without bouncing through a proxy page +as is required when using the XMLHttpRequest object (on which IO Utility +relies).

+ +
+ + + +
+ + +
+ + + + + + + + +
+ +
+ + +
+
+ + + + + + +