Development #7805
Add helpers to implement JSON/JSONP views with CORS support
Start date:
08 Jul 2015
Due date:
% Done:
100%
Estimated time:
Patch proposed:
No
Planning:
Description
Cross origin requests should be validated, using the Origin header for CORS request and the Referer for <script> loading of JSONP endpoints.
Associated revisions
manager: use new json decorator on menu_json (#7805)
History
Updated by Benjamin Dauvergne over 5 years ago
- Status changed from Nouveau to Résolu (à déployer)
- % Done changed from 0 to 100
Appliqué par commit authentic2|fdbb3eb878f8b16ea14552cdfcb7b10fed2ddc34.
Updated by Benjamin Dauvergne about 5 years ago
- Status changed from Résolu (à déployer) to Solution déployée
add support for CORS request by JSON or JSONP (fixes #7805)
JSONP is checked against the Referer header and JSON against the Origin
header.