Salient Solutions

wrasslin ones and nones for fun and profit - Sky Sanders' Blog
posts - 96, comments - 70, trackbacks - 0

October 2010 Entries

people say 'native JSON implementations considered dangerous'

ok, so I said it.   After spending 8 hours trying to figure out why some fairly complex but carefully crafted and instrumented javascript code was working on in all browsers (including chrome) except Safari, I stumbled across another native JSON bug. Safari JSON coult not serialize a simple object that json2.js (and most other browser's native stringify) has no problem with, throws and kills the script. I will likely break the case out and submit a bug but... Sky Sanders says "Forget the sunscreen, if you remember anything I have ever said, remember that considering the inconsistency and presence of confirmed bugs in multiple browser...

posted @ Sunday, October 17, 2010 6:05 AM | Feedback (0) |

Leveraging window.name transport for secure and efficient cross domain communications

  The window.name transport is a new technique for secure cross-domain browser based data transfer, and can be utilized for creating secure mashups with untrusted sources. window.name is implemented in Dojo in the new dojox.io.windowName module, and it is very easy to make web services available through the window.name protocol. window.name works by loading a cross-domain HTML file in an iframe. The HTML file then sets its window.name to the string content that should be delivered to the requester. The requester can then retrieve the window.name value as the response. The requested resource never has access to the requester’s environment (JavaScript...

posted @ Monday, October 11, 2010 6:19 AM | Feedback (1) |

Powered by: