Return-Path: Delivered-To: apmail-couchdb-user-archive@www.apache.org Received: (qmail 14430 invoked from network); 12 Sep 2010 21:43:19 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 12 Sep 2010 21:43:19 -0000 Received: (qmail 18447 invoked by uid 500); 12 Sep 2010 21:43:18 -0000 Delivered-To: apmail-couchdb-user-archive@couchdb.apache.org Received: (qmail 18389 invoked by uid 500); 12 Sep 2010 21:43:17 -0000 Mailing-List: contact user-help@couchdb.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@couchdb.apache.org Delivered-To: mailing list user@couchdb.apache.org Received: (qmail 18381 invoked by uid 99); 12 Sep 2010 21:43:17 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 12 Sep 2010 21:43:17 +0000 X-ASF-Spam-Status: No, hits=2.2 required=10.0 tests=FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS,T_TO_NO_BRKTS_FREEMAIL X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of mikeal.rogers@gmail.com designates 209.85.216.180 as permitted sender) Received: from [209.85.216.180] (HELO mail-qy0-f180.google.com) (209.85.216.180) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 12 Sep 2010 21:43:11 +0000 Received: by qyk31 with SMTP id 31so5087898qyk.11 for ; Sun, 12 Sep 2010 14:42:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=okDJKutkdHNazp8mmJJhq3c/xV7roLstioWBPy1Q1Bw=; b=Biz13f6l8YRcaHVR6xzZQ83KCCrk/o3PdS92n2WRvt18nEIJq12+A765EpkCwaiQOl XITn/7/mVnoytWUr30mRIB5tAg/HjnXpeOnZtv0UFmj+fuVAS05txwz7LqZbRANREydg UzHvkvztZA0Gfz0SLINgpHcFXFkUW92WYyGqI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=vLGfoZ7agwQCy5gK8+5BSt9R8ika/I7rfdd6lit2/tzmMDv6HFuYYGNoBci/M8SSlF iiK/3ZVNos2JqQRVJabV4rf0aIw5VE/xBuGOZPQ1T9aW9Q9936V0OL2DIkre3MrTdBmw baAPumRorwWyHoEaCU0lFlB3IZGodMbZ8VMi4= MIME-Version: 1.0 Received: by 10.224.28.144 with SMTP id m16mr2245590qac.357.1284327769441; Sun, 12 Sep 2010 14:42:49 -0700 (PDT) Received: by 10.229.249.81 with HTTP; Sun, 12 Sep 2010 14:42:49 -0700 (PDT) In-Reply-To: References: Date: Sun, 12 Sep 2010 14:42:49 -0700 Message-ID: Subject: Re: JavaScript Cross-Site in CouchApp From: Mikeal Rogers To: user@couchdb.apache.org Content-Type: multipart/alternative; boundary=0015175ccf727904cd049016dcef --0015175ccf727904cd049016dcef Content-Type: text/plain; charset=ISO-8859-1 Some of Google's APIs have an "AJAX" API which uses JSONP or cross domain XHR but Picasa does not appear to be one of those. -Mikeal On Sun, Sep 12, 2010 at 2:32 PM, Ido Ran wrote: > Hi, > It is not exactly CouchDB specific question so if it not the place tell me > and I'm sorry for bugging. > > I'm building a CouchApp (finally it start to work :) which will be a > "gateway" to PicasaWeb. > The idea is to have hierarchical folders which contain links to picasaweb > albums. > > My question is: is it possible to do a GET from my CouchApp to PicasaWeb to > get things like the feed of the album (using PicasaWeb API) or is it not > possible because of cross-site scripting? > > Thank you, > Ido > --0015175ccf727904cd049016dcef--