Your API-Centric Web App Is Probably Not Safe Against XSS and CSRF
Most of the developments I’ve participated in recently follow the “single-page application based on a public API with authentication” architecture. Using Angular.js or React.js, and based on a RESTful API, these applications move most of the complexity to the client side. But as we’re reinventing web applications, we need to reinvent web application security, too. Is an API-centric architecture vu
CORS: Cannot use wildcard in Access-Control-Allow-Origin when credentials flag is true
I have a setup involving Frontend server (Node.js, domain: localhost:3000) <---> Backend (Django, Ajax, domain: localhost:8000) Browser <-- webapp <-- Node.js (Serve the app) Browser (webapp) --> Ajax --> Django(Serve ajax POST requests) Now, my problem here is with CORS setup which the webapp uses to make Ajax calls to the backend server. In chrome, I keep getting Cannot use wildcard in Access-Co
React AJAX Best Practices
When you start asking about AJAX and React, the first thing the experts will tell you is that React is a view library and React has no networking/AJAX features. It's good to know, but not very helpful when you just want to get data from the server into your React components. The truth is, there are a ton of ways to do it. You probably have thought of a couple ways yourself, but if you choose the w
Working with JavaScript in Rails — Ruby on Rails Guides
This guide covers the options for integrating JavaScript functionality into your Rails application, including the options you have for using external JavaScript packages and how to use Turbo with Rails. After reading this guide, you will know: How to use Rails without the need for a Node.js, Yarn, or a JavaScript bundler. How to create a new Rails application using import maps, Bun, esbuild, Rollu
Is Safari on iOS 6 caching $.ajax results?
Since the upgrade to iOS 6, we are seeing Safari's web view take the liberty of caching $.ajax calls. This is in the context of a PhoneGap application so it is using the Safari WebView. Our $.ajax calls are POST methods and we have cache set to false {cache:false}, but still this is happening. We tried manually adding a TimeStamp to the headers but it did not help. We did more research and found t
Ajax Security
#NoXML: Eliminating XML in Spring Projects - SpringOne 2GX 2015
Getting Started - Making AJAX Applications Crawlable - Google Code
Getting Started This document outlines the steps that are necessary in order to make your AJAX application crawlable. Once you have fully understood each of these steps, it should not take you very long to actually make your application crawlable! However, you do need to understand each of the steps involved, so we recommend reading this guide in its entirety. Overview of Solution Briefly, the sol
Google AJAX APIs Blog
When we introduced this blog over four years ago, the term AJAX was only a year old, and Google had exactly one relevant API . Ajax has since become a mainstream part of the Web, and our family of APIs has grown. Like many growing families, we’ve accumulated a lot of cruft over the years, and have outgrown our first home. Time for some housekeeping. API Documentation - Now easier to find and use W
Google AJAX Search API - AJAX Map Search Control
AJAX Map Search Solution The Map Search Control is a simple to use application of the Google AJAX Search API that is designed to let you easily add a searchable map to your pages, sites, and blogs. The control on the right demonstrates some of the things that this control can do. The control is highly customizable, allowing you to specify custom markers, pre-selected search terms, map dimensions,
Developer's Guide - Google AJAX Search API - Google Code
注æ: ä¸é¨ã®ãã¼ã¸ã¯è±èªã§ã®ã¿ãå©ç¨ããã ãã¾ãã Developer's Guide Google AJAX Search API ã¯ãGoogle Searchãã¦ã§ã ãã¼ã¸ããã®ä»ã®ã¦ã§ã ã¢ããªã±ã¼ã·ã§ã³ã«åãè¾¼ããã¨ãå¯è½ã«ãã Javascript ã©ã¤ãã©ãªã§ããFlash ãããã®ä»ã® JavaScript ã使ç¨ããªãç°å¢ã«ããã¦ãAPI ã§ã¯ç´æ¥ã® RESTful ã¤ã³ã¿ã¼ã
jQuery UI Tabs で Ajax、Cookie、キャッシュを使ったタブコンテンツを作りたい
正式版となった「jQuery UI 1.8」が公開されました。先日、「Ajaxのタブ切り替えを使って、WPのサイドバーにある発リンク数を調整」という記事を書いているのですが、早速同様のタブコンテンツを jQuery UI Tabs で再現したいと思います。 ファイル一式を用意 デモ : http://jqueryui.com/demos/tabs/ ダウンロード : http://jqueryui.com/download 1. ダウンロードのページに行くと、全ファイルにチェックが入った状態で待ち構えていますが、必要最低限のファイルだけ欲しいので、いったん全チェックを外します。 2. WidgetsにあるTabsだけにチェックを入れます。エフェクトなどの機能が欲しい方は、必要なコンポーネントにチェックを加えてください。 3. Tabs をチェックすると、動作に必要な「Core」と「Widg
Developer's Guide - Google AJAX API - Google Code
注æ: ä¸é¨ã®ãã¼ã¸ã¯è±èªã§ã®ã¿ãå©ç¨ããã ãã¾ãã ã¹ã¿ã¼ã ã¬ã¤ã Google ã«ã¯ãMaps APIãAJAX Search APIãAJAX Feed API ã®ããã«ããµã¼ãã¼ãµã¤ã ã³ã¼ããä¼´ããã«ã¦ã§ã ãã¼ã¸ã§ä½¿ç¨ã§ãã AJAX API ãå¤æ°ããã¾ããã¦ã§ã ãã¼ã¸ã§ãã®ããã¤ããã¾ãã¯ãã¹ã¦ã使ãããã®æé ã¯ãã¦ã§ã ãã¼ã¸ã
symfony - open-source PHP5 web framework
Services Platform.sh for Symfony Best platform to deploy Symfony apps SymfonyInsight Automatic quality checks for your apps Symfony Certification Prove your knowledge and boost your career SensioLabs Professional services to help you with Symfony Blackfire Profile and monitor performance of your apps
CakePHPのAuthコンポーネントとAjax « nought
CakePHPで認証はAuthコンポーネントを使ってるんですが、セッション切れのときに画面の遷移をするとログイン画面に遷移するんですが、Ajaxの時はどうなるかやってみました。 ちなみにCakePHPは1.2.5を使いました。 タイムアウトを待つのも面倒なのでセッションを消して、リクエストを飛ばすと空のデータが落ちてくるだけ。。。 サーバ側はセッションが切れてるので当然データは返さない。 なるほど。セッションが切れてる事を通知しないとダメなんだね。自前で。 取りあえず、Authコンポーネントのソースで確認をしました。 AuthComponent::startup()をみると なんだよ。403返してるじゃん。ってことでHTTPのヘッダーを見ると200が返ってきてる。 なぜ？ このあと、 Controller::redirect() → Component::beforeRed
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
サンプル コード - Google AJAX Search API - Google Code
PHP AJAX Live Search
Facebook Platform Developer Forum / Implementation with fb:request-form and multi friend selector
symfony framework forum: General discussion => How to send ajax request to component?
How Connect Interacts with the Facebook API - Facebook Developer Wiki
IBM Developer
