4chan / 4chan-API

Documentation for 4chan's read-only JSON API.
http://www.4chan.org/
1.03k stars 73 forks source link

JSONP support? #4

Closed fluxa closed 11 years ago

fluxa commented 11 years ago

It'd be nice to have JSONP support for cross-domain ajax requests.

qqueue commented 11 years ago
  1. CORS is superior to JSONP for making cross-domain requests.
  2. moot probably doesn't want domains other than boards.4chan.org to be able to consume the API (which pretty much makes the API for his native script and userscripts only).
  3. JSONP doesn't have fine-grained access control.

I personally think there would be very little abuse if moot changed the CORS accepted orgins to "*", since board scrapers and non-browser software can already ignore cross-origin problems, and "just copying the site functionality" is already against the TOS. However, I don't pay for the servers or have access to the analytics.

If anything, we should get CORS headers on images.4chan.org: https://github.com/4chan/4chan-JS/issues/34

fluxa commented 11 years ago

fair enough.