Forum Discussion

grahamgatus's avatar
grahamgatus
Guide
10 years ago

JSONP support in Endpoints - undocumented feature?

I have been testing cross domain requests to an Endpoint I created, with the assumption that only CORS was supported to work around same origin browser issues when doing AJAX. I found however that if...
PaoloT's avatar
PaoloT
Lithium Alumni (Retired)
10 years ago

Hi SuzieH - looks like this could be part of our documentation if it is a supported feature (I am not sure about this part) ? Thanks, 

  • SuzieH's avatar
    SuzieH
    Khoros Alumni (Retired)
    10 years ago

    grahamgatus  and PaoloT  I'm checking with Engineering now. DougS can you shed some light?

    • SuzieH's avatar
      SuzieH
      Khoros Alumni (Retired)
      10 years ago

      grahamgatus What you attempted is supported. Engineering has confirmed that endpoints are not vulnerable to content sniffing or code injection attacks. We'll get more formalized documentation about this on our documentation backlog.

      • SuzieH's avatar
        SuzieH
        Khoros Alumni (Retired)
        9 years ago

        I want to follow up on this thread. The official recommendation from Lithium is to use CORS, not JSONP. We will continue to support customers currently using JSONP, but we cannot guarantee continued support in future releases.