Remove JSONP support
CORS is now widely supported and should be used instead for cross-domain requests. Issue: SPR-16914
This commit is contained in:
@@ -2030,11 +2030,6 @@ annotations. When further control is needed, a custom `ObjectMapper` can be inje
|
||||
through the `ObjectMapper` property for cases where custom JSON
|
||||
serializers/deserializers need to be provided for specific types.
|
||||
|
||||
http://en.wikipedia.org/wiki/JSONP[JSONP] is supported and automatically enabled when
|
||||
the request has a query parameter named `jsonp` or `callback`. The JSONP query parameter
|
||||
name(s) could be customized through the `jsonpParameterNames` property.
|
||||
|
||||
|
||||
|
||||
[[mvc-view-xml-mapping]]
|
||||
=== XML
|
||||
|
||||
@@ -2645,30 +2645,6 @@ to the model:
|
||||
}
|
||||
----
|
||||
|
||||
[[mvc-ann-jsonp]]
|
||||
===== Jackson JSONP
|
||||
|
||||
In order to enable http://en.wikipedia.org/wiki/JSONP[JSONP] support for `@ResponseBody`
|
||||
and `ResponseEntity` methods, declare an `@ControllerAdvice` bean that extends
|
||||
`AbstractJsonpResponseBodyAdvice` as shown below where the constructor argument indicates
|
||||
the JSONP query parameter name(s):
|
||||
|
||||
[source,java,indent=0]
|
||||
[subs="verbatim,quotes"]
|
||||
----
|
||||
@ControllerAdvice
|
||||
public class JsonpAdvice extends AbstractJsonpResponseBodyAdvice {
|
||||
|
||||
public JsonpAdvice() {
|
||||
super("callback");
|
||||
}
|
||||
}
|
||||
----
|
||||
|
||||
For controllers relying on view resolution, JSONP is automatically enabled when the
|
||||
request has a query parameter named `jsonp` or `callback`. Those names can be
|
||||
customized through `jsonpParameterNames` property.
|
||||
|
||||
|
||||
|
||||
[[mvc-ann-modelattrib-methods]]
|
||||
|
||||
@@ -401,8 +401,8 @@ The 3 possible behaviors are:
|
||||
transport is disabled since it does not allow to check the origin of a request.
|
||||
As a consequence, IE6 and IE7 are not supported when this mode is enabled.
|
||||
* Allow a specified list of origins: each provided _allowed origin_ must start with `http://`
|
||||
or `https://`. In this mode, when SockJS is enabled, both IFrame and JSONP based
|
||||
transports are disabled. As a consequence, IE6 through IE9 are not supported when this
|
||||
or `https://`. In this mode, when SockJS is enabled, IFrame transport is disabled.
|
||||
As a consequence, IE6 through IE9 are not supported when this
|
||||
mode is enabled.
|
||||
* Allow all origins: to enable this mode, you should provide `{asterisk}` as the allowed origin
|
||||
value. In this mode, all transports are available.
|
||||
|
||||
Reference in New Issue
Block a user