0

JSONP EXCEPTIONS=text/javascript Return a JsonP in the form: paddingOutput(...jsonp...). See WMS vendor parameters to change the callback name. Note that this format is disabled by default.

http://docs.geoserver.org/latest/en/user/services/wms/reference.html

Is there any security, performance or vulnability issues with jsonp enabled?

1

This discussion suggests that the risk is real but minor http://osgeo-org.1560.x6.nabble.com/GSIP-79-Json-support-and-WFS-and-WMS-ExceptionHandler-s-tt4999973.html#a5000874

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.