Telliamed on 28/3/2013 at 06:01
This has been a minor annoyance for a while and I finally put in the effort to find out what the problem is. Basically, the vB editor is useless for me. It's just this browser, Chromium in Debian. I've traced the problem down to AJAX requests being returned with responseXML set to null.
The response appears to be valid and has the correct MIME type. By (
http://stackoverflow.com/questions/3781387/responsexml-always-null) this discussion the culprit would seem to be the same-origin policy. Indeed, the AJAX handler is being loaded from googleapis.com so the request back to ttlg.com is tainted and doesn't get parsed.
Fortunately (
https://en.wikipedia.org/wiki/Cross-Origin_Resource_Sharing) there is a solution to this problem. Well, I hope that would do it.
I'm puzzled why Chrome on Windows doesn't mind it. I suppose the Debian maintainers have added some extra paranoid patches. In any case, is it too much to ask that CORS headers be added to the server?
Al_B on 28/3/2013 at 10:40
I've reproduced the problem in a couple of webkit based browsers on Debian so I'll certainly look into it. I'd normally expect same-origin policy problems to affect lots of browsers so I'm a little surprised it's just affecting Debian.
Telliamed on 31/3/2013 at 00:04
To be honest, there are days when I can't remember how CORS works. I mean, if you have to give permission to a public CDN to access your resources, how do you stop any random script on the internet from using the same API to XSS your site?
And none of the Debian patches to Chromium seem to do with security. So no help there.
Al_B on 1/4/2013 at 00:50
Yup - that would be a huge security hole and if it could be spoofed by a client I don't see why it would be trusted.
The good news is that it's not an ajax issue - the bad news is that it seems to be a Chromium XML parsing issue. The utility scripts which are doing the ajax requests are hosted on a CDN but the response pages are hosted here. The mime type is correct as you say and the response, even when simplified, still doesn't work so not sure what the particular issue is with that browser. Do you have access to any other up to date vbulletin based forums to see if they have the same issue for you?
andrikaa on 27/2/2014 at 07:07
Can JavaScript create a rich interactive site like animations that when rolled over play out, or an interactive object that can be drug around the screen like a type of video game of sorts? or is Javascript limited to just hover buttons and photo gallery's thing like that?
Pyrian on 27/2/2014 at 07:34
JavaScript isn't particularly limited in terms of straight capabilities. Speed and convenience are more likely to be issues. It's relatively easy to respond to mouse movements and create animated sprites, though.
SubJeff on 5/3/2014 at 15:08
It's really come into its own in recent years too, with multiple libraries for it like jQuery, data implementations like JSON and you can even use it on the server now with Node.
I'm trying to learn Node so I can have sites that have a full JavaScript stack - JavaScript + jQuery for the front end and data manipulation, JSON for my storage and Node on the server.
scumble on 8/3/2014 at 13:27
jQuery is quite old news now, and it forms the basis of a number of different frameworks such as AngularJS or Twitter Bootstrap. Still important, but less people are directly using jQuery for building web applications. When I dug into it recently I was amazed at how many web/mobile frameworks are available.
SubJeff on 9/3/2014 at 01:04
Yeah there's loads. But you don't need to use Angular or Ember unless you, err, need the stuff they have.
jQuery allows for easy event handling and dom manipulation.
