Here is another way to think about the question. Suppose that the response is handled
by ignoring the response entirely, i.e., we do
$.get(url, function(response) { /* do nothing */ })
. In other words, imagine the code just does a
$.get()
and then ignores the response. Is that safe, or is it unsafe? (For
$.getJSON()
, the answer is "unsafe", even when the code entirely ignores the response, as explained at the other question. But what about for
$.get()
?) Note that this is a question about code review, not about what some random user viewing the source of a page would do. —
D.W. 48 secs ago