Re: [OAUTH-WG] Returning HTTP 200 on Error for JSONP

How fortuitous: 
  http://blogs.msdn.com/b/ieinternals/archive/2010/08/19/http-error-pages-in-internet-explorer.aspx 

On 19/08/2010, at 8:47 AM, Mark Nottingham wrote:

> See:
>  http://support.microsoft.com/kb/294807
> 
> 
> On 19/08/2010, at 1:55 AM, Brian Eaton wrote:
> 
>> On Tue, Aug 17, 2010 at 11:36 PM, Mark Nottingham <mnot@mnot.net> wrote:
>>>> The other reason people get funny with these status codes has to do
>>>> with browser behavior.  Sometimes browsers react in funny ways to
>>>> funny HTTP status codes.  To be on the safe side, developers tend to
>>>> return an HTTP 200 with whatever they want the user to see.
>>> 
>>> Can you give concrete examples, please? What browsers do what exactly, under what circumstances?
>> 
>> Here's a well-known example:
>> http://malektips.com/internet-explorer-8-disable-friendly-error-messages.html.
>> 
>> Fuzzier stuff is in handling of things like WWW-Authenticate headers
>> on HTTP 200 responses, or 401s with unknown authorization challenges.
> 
> 
> --
> Mark Nottingham     http://www.mnot.net/
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth

--
Mark Nottingham     http://www.mnot.net/