Live briefing

Everything about JSONP

JavaScript technique for loading data

JSONP, or JSON-P, is a JavaScript technique for requesting data via the <script> HTML element. It was proposed by Bob Ippolito in 2005. JSONP enables sharing of data bypassing same-origin policy, which disallows running JavaScript code to read media DOM elements or XMLHttpRequest data fetched from outside the page's originating site. The originating site is indicated by a combination of URI scheme, hostname, and port number. Wikipedia →

🧭 Start here: a 6-step reading path

Read the overview: JSONPA 5-minute orientation
Pick up a classic book: JavaScriptThe most-reprinted book on the subject
Go sideways: Same-origin policyA closely related topic
Go sideways: XMLHttpRequestA closely related topic

📖 Definitions

No dictionary entry for this exact phrase.

🗂️ The subject at a glance

🏆 Landmark papers (most cited)

No matching papers found.

📚 Books worth reading

JavaScriptDavid Flanagan · 1996
Apache Solr 3 Enterprise Search ServerDavid Smiley · 2011
jQuery cookbookCody Lindley · 2009
jQuery cookbookjQuery Community Experts · 2010

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

Same-origin policy In computing, the same-origin policy (SOP) is a concept in the web application security model. Under the policy, a web browser permits scripts contained…
XMLHttpRequest XMLHttpRequest (XHR) is an API in the form of a JavaScript object whose methods transmit HTTP requests from a web browser to a web server. The methods…
Cross-site request forgery Cross-site request forgery (CSRF, sometimes pronounced sea-surf) is a type of malicious exploit of a website or web application where unauthorized commands…
Cross-site scripting Cross-site scripting (XSS) is a type of security vulnerability that can be found in some web applications. XSS attacks enable attackers to inject client-side…
Comet (programming) Comet is a web application model in which a long-held HTTPS request allows a web server to push data to a browser, without the browser explicitly requesting…
Ajax (programming) Asynchronous JavaScript and XML, usually referred to as Ajax (sometimes capitalized AJAX, /ˈeɪdʒæks/) is a set of web development techniques that uses…
Cross-origin resource sharing In computing, cross-origin resource sharing (CORS) is a mechanism to safely bypass the same-origin policy; that is, it allows a web page to access restricted…
JSON JSON (JavaScript Object Notation, pronounced /ˈdʒeɪsən/ or /ˈdʒeɪˌsɒn/) is an open standard file format and data interchange format that uses human-readable…