[OpenLayers-Trac] [OpenLayers] #3417: Change the callback function of Protocol.Script (JSONP)

OpenLayers trac-20090302 at openlayers.org
Mon Jul 18 17:32:56 EDT 2011


#3417: Change the callback function of Protocol.Script (JSONP)
-----------------------------+----------------------------------------------
 Reporter:  vmische          |       Owner:  fredj       
     Type:  feature          |      Status:  new         
 Priority:  minor            |   Milestone:  2.11 Release
Component:  Protocol         |     Version:  SVN         
 Keywords:  Protocol.Script  |       State:              
-----------------------------+----------------------------------------------
 Currently the callback function for OpenLayers.Protocol.Script (JSONP)
 looks like "OpenLayers.Protocol.Script.getCallback(5)". This might make
 problems with servers that validate the callback to make sure no arbitrary
 JavaScript can be executed [1].

 Hence I propose using a function like
 "OpenLayers.Protocol.Script.registry[5]"

 [1] http://tav.espians.com/sanitising-jsonp-callback-identifiers-for-
 security.html

-- 
Ticket URL: <http://trac.openlayers.org/ticket/3417>
OpenLayers <http://openlayers.org/>
A free AJAX map viewer


More information about the Trac mailing list