Re: XDR *API* Security Impact

> I don't know whether "most modern devs are using JSON",

Yeah, I really don't have any data to back that up, I shouldn't make such 
claims :). But I think it is safe to say that many devs use it.

> More generically, I don't think that new cross-origin APIs that
> "just return a string" (but are clearly intended for structured
> data) should be standardized (or shipped) given the experience
> that's available.

So you would be in favor of a responseJSON property?

Kris 

Received on Monday, 14 April 2008 17:33:56 UTC