[OpenLayers-Trac] [OpenLayers] #3417: Change the callback function
of Protocol.Script (JSONP)
OpenLayers
trac-20090302 at openlayers.org
Mon Jul 18 17:32:56 EDT 2011
#3417: Change the callback function of Protocol.Script (JSONP)
-----------------------------+----------------------------------------------
Reporter: vmische | Owner: fredj
Type: feature | Status: new
Priority: minor | Milestone: 2.11 Release
Component: Protocol | Version: SVN
Keywords: Protocol.Script | State:
-----------------------------+----------------------------------------------
Currently the callback function for OpenLayers.Protocol.Script (JSONP)
looks like "OpenLayers.Protocol.Script.getCallback(5)". This might make
problems with servers that validate the callback to make sure no arbitrary
JavaScript can be executed [1].
Hence I propose using a function like
"OpenLayers.Protocol.Script.registry[5]"
[1] http://tav.espians.com/sanitising-jsonp-callback-identifiers-for-
security.html
--
Ticket URL: <http://trac.openlayers.org/ticket/3417>
OpenLayers <http://openlayers.org/>
A free AJAX map viewer
More information about the Trac
mailing list