Its great that you have an api up .. could you please put up a
crossdomain.xml file http://crossdomainxml.org ... it helps flash and
AIR apps to use your api.
> Its great that you have an api up .. could you please put up a > crossdomain.xml file http://crossdomainxml.org ... it helps flash and > AIR apps to use your api.
Thanks a lot Bret ... the crossdomain file will enable various Rich
Internet Application technologies like Flash, Flex, AIR and
Silverlight to use your api.
_
Mrinal
http://weblog.mrinalwadhwa.com
On Mar 26, 10:31 am, "Bret Taylor" <btay...@gmail.com> wrote:
> Thanks for bringing this to our attention. I am less experienced with Flash,
> but I will investigate this tomorrow. Seems like an easy thing to fix.
> Bret
> On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> wrote:
> > Hi Guys,
> > Its great that you have an api up .. could you please put up a
> > crossdomain.xml filehttp://crossdomainxml.org ... it helps flash and
> > AIR apps to use your api.
Another vote here for the crossdomain.xml file. I have the xml parsed
out and will be willing to send out my AS3 api code. It uses binding
so would have to be compiled with mxmlc or in flex right now. If I
have time I'll post an example up with dummy XML until the crossdomain
goes up.
Fun API so far tho. It's simple and powerful. Oh and another vote for
a list of possible services somewhere.
On Mar 25, 10:44 pm, Mrinal Wadhwa <mrinal.wad...@gmail.com> wrote:
> Thanks a lot Bret ... thecrossdomainfile will enable various Rich
> Internet Application technologies like Flash, Flex, AIR and
> Silverlight to use your api.
> _
> Mrinalhttp://weblog.mrinalwadhwa.com
> On Mar 26, 10:31 am, "Bret Taylor" <btay...@gmail.com> wrote:
> > Mrinal,
> > Thanks for bringing this to our attention. I am less experienced with Flash,
> > but I will investigate this tomorrow. Seems like an easy thing to fix.
> > Bret
> > On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> > wrote:
> > > Hi Guys,
> > > Its great that you have an api up .. could you please put up a
> > >crossdomain.xml filehttp://crossdomainxml.org ... it helps flash and
> > > AIR apps to use your api.
> Another vote here for the crossdomain.xml file. I have the xml parsed
> out and will be willing to send out my AS3 api code. It uses binding
> so would have to be compiled with mxmlc or in flex right now. If I
> have time I'll post an example up with dummy XML until the crossdomain
> goes up.
> Fun API so far tho. It's simple and powerful. Oh and another vote for
> a list of possible services somewhere.
> On Mar 25, 10:44 pm, Mrinal Wadhwa <mrinal.wad...@gmail.com> wrote:
> > Thanks a lot Bret ... thecrossdomainfile will enable various Rich
> > Internet Application technologies like Flash, Flex, AIR and
> > Silverlight to use your api.
> > _
> > Mrinalhttp://weblog.mrinalwadhwa.com
> > On Mar 26, 10:31 am, "Bret Taylor" <btay...@gmail.com> wrote:
> > > Mrinal,
> > > Thanks for bringing this to our attention. I am less experienced with Flash,
> > > but I will investigate this tomorrow. Seems like an easy thing to fix.
> > > Bret
> > > On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> > > wrote:
> > > > Hi Guys,
> > > > Its great that you have an api up .. could you please put up a
> > > >crossdomain.xml filehttp://crossdomainxml.org... it helps flash and
> > > > AIR apps to use your api.- Hide quoted text -
While you are at it, I'd like to bring your attention to another
related issue.
Since the api end points are on the main www.friendfeed.com domain,
You guys might wanna have a secure (restricted to friendfeed's own
subdomains, and other trusted domains) crossdomain file at the root.
This will be a problem for applications that are hosted in other
webpages. Opening up the crossdomain.xml file on the root folder to
all domains might make the site susceptible to crossdomain scripting
attacks.
To overcome this issue, the best solution so far has been to host the
api in a seperate subdomain by itself. Flickr took the initiative a
few months ago of moving the api to a separate subdomain
( api.flickr.com ). Please take a look at http://api.flickr.com/crossdomain.xml
Twitter folks recently made changes to their crossdomain.xml file, and
fear that there might be broken applications.
http://dev.twitter.com/2008/03/don-cross-domains.html The latest word is that twitter is planning to have the api accessible
via a api.twitter.com subdomain( not confirmed yet though)
Hope to see a api.friendfeed.com soon :)
Cheers,
Arul Prasad
On Mar 26, 1:31 pm, "Bret Taylor" <btay...@gmail.com> wrote:
> Thanks for bringing this to our attention. I am less experienced with Flash,
> but I will investigate this tomorrow. Seems like an easy thing to fix.
> Bret
> On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> wrote:
> > Hi Guys,
> > Its great that you have an api up .. could you please put up a
> > crossdomain.xml filehttp://crossdomainxml.org ... it helps flash and
> > AIR apps to use your api.
While you are at it, I'd like to bring your attention to another
related issue.
Since the api end points are on the main www.friendfeed.com domain,
You guys might wanna have a secure (restricted to friendfeed's own
subdomains, and other trusted domains) crossdomain file at the root.
This will be a problem for applications that are hosted in other
webpages. Opening up the crossdomain.xml file on the root folder to
all domains might make the site susceptible to crossdomain scripting
attacks.
To overcome this issue, the best solution so far has been to host the
api in a separate sub-domain by itself. Flickr took the initiative a
few months ago of moving the api to a separate subdomain
( api.flickr.com ). Please take a look at http://api.flickr.com/crossdomain.xml
Twitter folks recently made changes to their crossdomain.xml file, and
fear that there might be broken applications.
http://dev.twitter.com/2008/03/don-cross-domains.html The latest word is that twitter is planning to have the API accessible
via a api.twitter.com sub-domain( not confirmed yet though)
> Thanks for bringing this to our attention. I am less experienced with Flash,
> but I will investigate this tomorrow. Seems like an easy thing to fix.
> Bret
> On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> wrote:
> > Hi Guys,
> > Its great that you have an api up .. could you please put up a
> > crossdomain.xml filehttp://crossdomainxml.org ... it helps flash and
> > AIR apps to use your api.
On Fri, Apr 4, 2008 at 5:22 AM, ArulPrasad <arulpra...@gmail.com> wrote:
> While you are at it, I'd like to bring your attention to another > related issue.
> Since the api end points are on the main www.friendfeed.com domain, > You guys might wanna have a secure (restricted to friendfeed's own > subdomains, and other trusted domains) crossdomain file at the root. > This will be a problem for applications that are hosted in other > webpages. Opening up the crossdomain.xml file on the root folder to > all domains might make the site susceptible to crossdomain scripting > attacks.
> To overcome this issue, the best solution so far has been to host the > api in a seperate subdomain by itself. Flickr took the initiative a > few months ago of moving the api to a separate subdomain > ( api.flickr.com ). Please take a look at > http://api.flickr.com/crossdomain.xml
> Twitter folks recently made changes to their crossdomain.xml file, and > fear that there might be broken applications. > http://dev.twitter.com/2008/03/don-cross-domains.html > The latest word is that twitter is planning to have the api accessible > via a api.twitter.com subdomain( not confirmed yet though)
> Hope to see a api.friendfeed.com soon :)
> Cheers, > Arul Prasad
> On Mar 26, 1:31 pm, "Bret Taylor" <btay...@gmail.com> wrote: > > Mrinal,
> > Thanks for bringing this to our attention. I am less experienced with > Flash, > > but I will investigate this tomorrow. Seems like an easy thing to fix.
> > Bret
> > On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com> > > wrote:
> > > Hi Guys,
> > > Its great that you have an api up .. could you please put up a > > > crossdomain.xml filehttp://crossdomainxml.org ... it helps flash and > > > AIR apps to use your api.
> On Mar 28, 8:57 pm, "pran...@gmail.com" <pran...@gmail.com> wrote:
> > Another vote here for thecrossdomain.xml file. I have the xml parsed
> > out and will be willing to send out my AS3 api code. It uses binding
> > so would have to be compiled with mxmlc or in flex right now. If I
> > have time I'll post an example up with dummy XML until the crossdomain
> > goes up.
> > Fun API so far tho. It's simple and powerful. Oh and another vote for
> > a list of possible services somewhere.
> > On Mar 25, 10:44 pm, Mrinal Wadhwa <mrinal.wad...@gmail.com> wrote:
> > > Thanks a lot Bret ... thecrossdomainfile will enable various Rich
> > > Internet Application technologies like Flash, Flex, AIR and
> > > Silverlight to use your api.
> > > _
> > > Mrinalhttp://weblog.mrinalwadhwa.com
> > > On Mar 26, 10:31 am, "Bret Taylor" <btay...@gmail.com> wrote:
> > > > Mrinal,
> > > > Thanks for bringing this to our attention. I am less experienced with Flash,
> > > > but I will investigate this tomorrow. Seems like an easy thing to fix.
> > > > Bret
> > > > On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> > > > wrote:
> > > > > Hi Guys,
> > > > > Its great that you have an api up .. could you please put up a
> > > > >crossdomain.xmlfilehttp://crossdomainxml.org... it helps flash and
> > > > > AIR apps to use your api.- Hide quoted text -
> Yah, we realized this when evaluating crossdomain.xml, which is why it
> doesn't exist yet. Once we move to a subdomain, it will exist.
> Thanks for taking the time to write us and confirming our understanding of
> the situation.
> Bret
> On Fri, Apr 4, 2008 at 5:22 AM, ArulPrasad <arulpra...@gmail.com> wrote:
> > While you are at it, I'd like to bring your attention to another
> > related issue.
> > Since the api end points are on the mainwww.friendfeed.comdomain,
> > You guys might wanna have a secure (restricted to friendfeed's own
> > subdomains, and other trusted domains) crossdomain file at the root.
> > This will be a problem for applications that are hosted in other
> > webpages. Opening up the crossdomain.xml file on the root folder to
> > all domains might make the site susceptible to crossdomain scripting
> > attacks.
> > To overcome this issue, the best solution so far has been to host the
> > api in a seperate subdomain by itself. Flickr took the initiative a
> > few months ago of moving the api to a separate subdomain
> > ( api.flickr.com ). Please take a look at
> >http://api.flickr.com/crossdomain.xml
> > Twitter folks recently made changes to their crossdomain.xml file, and
> > fear that there might be broken applications.
> >http://dev.twitter.com/2008/03/don-cross-domains.html > > The latest word is that twitter is planning to have the api accessible
> > via a api.twitter.com subdomain( not confirmed yet though)
> > Hope to see a api.friendfeed.com soon :)
> > Cheers,
> > Arul Prasad
> > On Mar 26, 1:31 pm, "Bret Taylor" <btay...@gmail.com> wrote:
> > > Mrinal,
> > > Thanks for bringing this to our attention. I am less experienced with
> > Flash,
> > > but I will investigate this tomorrow. Seems like an easy thing to fix.
> > > Bret
> > > On Tue, Mar 25, 2008 at 9:18 PM, Mrinal Wadhwa <mrinal.wad...@gmail.com>
> > > wrote:
> > > > Hi Guys,
> > > > Its great that you have an api up .. could you please put up a
> > > > crossdomain.xml filehttp://crossdomainxml.org... it helps flash and
> > > > AIR apps to use your api.- Hide quoted text -
|
