Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 2

Questions about usage of the Stack Exchange API in client-side browser JavaScript.

6 votes
Accepted

Support Cross-Origin Resource Sharing

API V2 did this, we send down: Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Origin: * With every response.
Kevin Montrose's user avatar
1 vote

OR operator for StackOverflow API

/search has atagged parameter with OR semantics. The # of returns is capped, and the results are very heavily cached. Things get tricky when somebody asks for everything tagged c# or java, and then …
Kevin Montrose's user avatar
3 votes
Accepted

Is something filtering 'document.cookie' in SO pages?

We do this to prevent the classic javascript injection -> stolen user credential attack. …
Kevin Montrose's user avatar
0 votes

Injecting HTML Into A Stackexchange Site

Policy wise, we don't restrict [app] behavior. Obviously, we frown on malicious code or usage patterns... but I doubt anyone's going to ask for permission to do bad things. In short, you're in the c …
Kevin Montrose's user avatar
2 votes
Accepted

Best way to calculate total badge count in Javascript?

The API (once it's version 1.0*, anyway) won't change. You're concerns are unwarranted. Just sum the gold, silver, and bronze badges counts you get from /users/{id}. *And with 0.9 being a release c …
Kevin Montrose's user avatar
7 votes
Accepted

Is it safe to embed my API key into my javascript-only application?

Yes. Your API key identifies your application for stat tracking purposes more-so than security purposes. It is safe to leave in a plain text, user readable, format.
Kevin Montrose's user avatar