• From: Elliotte Rusty Harold <elharo@i...>
• To: Rob Koberg <rob@k...>
• Date: Wed, 8 Dec 2010 08:08:48 -0500

On Tue, Dec 7, 2010 at 7:15 PM, Rob Koberg <rob@k...> wrote:

> First thing: Get the browser builders to allow cross domain loading of
> XML. Without that you might as just bang your head on a post. (even
> with that, you will just be banging your head on a padded post)

Just want to double check this. JSON can be loaded cross-domain and
XML can't, right? I.e. I can eval JSON from an arbitrary host in my
browser-based JavaScript and I can't load XML using XmlHTTPRequest
unless it comes from the same host? Or is it more subtle than that? If
so, is there a detailed analysis somewhere of exactly under what
conditions I can load JSON from where and how?

Googling around I see some blog posts, but no detailed analysis.

-- 
Elliotte Rusty Harold
elharo@i...

• Follow-Ups:
  • Re: Cross-domain loading of XML
    • From: David Carlisle <davidc@n...>
  • Re: Cross-domain loading of XML
    • From: Rob Koberg <rob@k...>
  • Re: Cross-domain loading of XML
    • From: Mike Sokolov <sokolov@i...>