3 ms·
> I specifically made the API be JSONP only (i.e. you need to provide a callback parameter), so if you abuse it, bad things will happen to your clients! Is OP
by anderspitman 6y ago
> I specifically made the API be JSONP only (i.e. you need to provide a callback parameter), so if you abuse it, bad things will happen to your clients!
Is OP threatening to inject harmful code into abusers' script tags, or am I totally misreading this.
- Fileformat 6y agoYes: I've made free APIs in the past that have been abused. I've made this for my needs and am happy to share, but it isn't a moneymaker. It is really simple to host your own copy, and I've tried make it pretty clear that it should only be for light, non-commercial use. You can see the code, so obviously I haven't done anything nefarious. Hopefully just the possibility will be enough of a deterrant. I'm curious how everyone else is dealing with freeloaders. I'm open to alternative suggestions.
- anderspitman 6y agoOh I don't have an alternative suggestion. Just thought it was an interesting approach. Also I've never used JSONP and hadn't considered the security implications of using a JSONP api you don't control.