Forum Discussion

grahamgatus's avatar
grahamgatus
Guide
10 years ago

JSONP support in Endpoints - undocumented feature?

I have been testing cross domain requests to an Endpoint I created, with the assumption that only CORS was supported to work around same origin browser issues when doing AJAX. I found however that if...
SuzieH's avatar
SuzieH
Khoros Alumni (Retired)

grahamgatus  and PaoloT  I'm checking with Engineering now. DougS can you shed some light?

SuzieH's avatar
SuzieH
Khoros Alumni (Retired)
10 years ago

grahamgatus What you attempted is supported. Engineering has confirmed that endpoints are not vulnerable to content sniffing or code injection attacks. We'll get more formalized documentation about this on our documentation backlog.

  • SuzieH's avatar
    SuzieH
    Khoros Alumni (Retired)
    9 years ago

    I want to follow up on this thread. The official recommendation from Lithium is to use CORS, not JSONP. We will continue to support customers currently using JSONP, but we cannot guarantee continued support in future releases.