sagemath/sagecell — Issue #263: Send CORS headers as an alternative to jsonp
Author: jasongrout
Created: 2012-03-03 18:44:42+00:00
State: open

It appears that we can use CORS instead of jsonp to embed Sage into other webpages. JSONP is something of a hack, so using CORS seems to be a better (i.e., more "official") solution.

http://www.w3.org/TR/cors/
https://developer.mozilla.org/en/HTTP_access_control
https://developer.mozilla.org/En/Server-Side_Access_Control
http://www.kendoui.com/blogs/teamblog/posts/11-10-04/using_cors_with_all_modern_browsers.aspx