Jersey feat. jQuery + JSONP

One of the most controversial but yet powerful techniques for integrating distributed systems is the JSONP format, a javascript function that bypasses the same origin policy of the browser. Jersey provides built-in support for JSONP and this blog demonstrates how to benefit from this feature. When JSONP is a good option? The controversial around JSONP is the fact that using JSONP your application bypasses the Same Origin Policy, facilitating the fearful cross-site scripting (XSS) [1, 2]. Despite that obvious risk, there are certain scenarios where JSONP makes sense and solves a lot of problems which would require a more expensive solution without the usage of cross site scripts. Consider you need to integrate some data between two web applications hosted by third party companies. Suppose those companies have no previous agreement so in order to share data between the companies you have two choices: To establish a secure channel between the servers (think about the business costs here). To expose the application data using JSONP, and then one application can consume the data of the other without any change in the network (the technical effort to support the JSONP format is minimum). The other aspect to consider in using the traditional is the problem of b...

Date: February, 25 2010
Url: http://www.java.net/blog/felipegaucho/archive/2010/02/25/jersey-feat-jquery-jsonp

Others News