Side navigation
#3045 closed bug (fixed)
Opened June 16, 2008 07:26AM UTC
Closed June 17, 2008 08:32PM UTC
Last modified January 05, 2010 10:56AM UTC
jsonp cross domain scripting
| Reported by: | contagion | Owned by: | flesler |
|---|---|---|---|
| Priority: | minor | Milestone: | 1.3 |
| Component: | ajax | Version: | 1.2.6 |
| Keywords: | Cc: | ||
| Blocked by: | Blocking: |
Description
When doing jsonp, jquery will first check if the requesting domain is different from the current one. However, it only check for host but not for protocol. Thus, http://example.com and https://example.com will be consider as a same domain.