By rudyjahchan
via blog.carbonfive.com
Submitted: Aug 20 2012 / 13:14
While JSONP and CORS allow thick-client web applications to circumvent the same origin policy preventing requests to servers in different domains, cross-domain interaction is also blocked on the client-side; browser windows loaded with different sites have limited access to each other in order to prevent security breaches. Sadly, this also prevents any communication between thick-clients of web applications that do know of and trust each other … unless they use the Window#postMessage method introduced in HTML5.
Add your comment
