<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: csshttprequest</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/csshttprequest.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-10-23T18:25:43+00:00</updated><author><name>Simon Willison</name></author><entry><title>CSSHttpRequest</title><link href="https://simonwillison.net/2008/Oct/23/csshttprequest/#atom-tag" rel="alternate"/><published>2008-10-23T18:25:43+00:00</published><updated>2008-10-23T18:25:43+00:00</updated><id>https://simonwillison.net/2008/Oct/23/csshttprequest/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://nb.io/hacks/csshttprequest/"&gt;CSSHttpRequest&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
Devious cross-domain Ajax hack that uses CSS for transport (@import rules with data URIs, but it still works in IE). Similar to JSONP but safer, since JSONP can cause arbitrary JavaScript to execute.

    &lt;p&gt;&lt;small&gt;&lt;/small&gt;Via &lt;a href="http://mike.teczno.com/snippets.html"&gt;Mike Migurski&lt;/a&gt;&lt;/small&gt;&lt;/p&gt;


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/ajax"&gt;ajax&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/atimport"&gt;atimport&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/crossdomain"&gt;crossdomain&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/css"&gt;css&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/csshttprequest"&gt;csshttprequest&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/javascript"&gt;javascript&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/json"&gt;json&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/jsonp"&gt;jsonp&lt;/a&gt;&lt;/p&gt;



</summary><category term="ajax"/><category term="atimport"/><category term="crossdomain"/><category term="css"/><category term="csshttprequest"/><category term="javascript"/><category term="json"/><category term="jsonp"/></entry></feed>