Have someone modify javascript code without write access

Question

I would like to test out some interviewees by having them write some javascript that will make requests against my server. I don't want to give them write access to my code base. Javascript runs on the client side, so this should technically be possible. However I know there are browser restrictions that say that the javascript has to come from the server?

I apologize that this is a really dumb question, but how should I proceed?

Edit:::

Ok, so I failed to mention that the entire application is based off sending JSON objects to and from the server.

bob-the-destroyer · Accepted Answer · 2010-12-13 03:32:23Z

1

I think you're thinking of the javascript XMLHttpRequest object itself, in which case, yes the current standard is for browsers to block cross-domain calls. So, you can tell them to pretend they either have a separate proxy script on their own personal domain which will allow them to leap to yours, or to pretend they're building a page directly served from your domain. There's talk of browsers supporting trust certificates or honoring special setups between source and target servers, but nothing universally accepted AFAIK.

Javascript source itself does not need to come from the server, and in fact this is how you can get around this little XMLHttpRequest block by using json. Here's a simple json tutorial I just dug up from Yahoo. But, this calls for your server to provide a json format feed if your server is the intended target.

edited Dec 13, 2010 at 3:32

answered Dec 13, 2010 at 3:26

bob-the-destroyer

3,1092 gold badges25 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Nick Craver · Accepted Answer · 2010-12-13 03:11:06Z

1

"there are browser restrictions that say that the javascript has to come from the server"

I'm not aware of any situation where that's the case, only a lack of a console. But...even in those cases there's the address bar and javascript:.

If I misunderstood and you're talking about cross-domain restrictions, then your server needs to support JSONP for the requests so they can make cross-domain calls for data.

answered Dec 13, 2010 at 3:11

Nick Craver

631k138 gold badges1.3k silver badges1.2k bronze badges

Comments

mu is too short · Accepted Answer · 2010-12-13 03:22:25Z

1

You could POST the javascript to your server and then your server can send back some HTML that has the javascript inlined. Sounds like you're trying to set up something is, more or less, a homebrew version of http://jsfiddle.net/; AFAIK, jsfiddle just does a "POST javascript/CSS/HTML and return HTML".

answered Dec 13, 2010 at 3:22

mu is too short

436k71 gold badges863 silver badges822 bronze badges

Collectives™ on Stack Overflow

Have someone modify javascript code without write access

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related