Embed the functionality of your site into strangers using Rails 3 (XSS vs iframes)

Question

We strive to integrate the display of some of our models, as well as the payment process with some of our client sites. It seems like everyone is following the iframe route, but it also looks pretty outdated compared to XSS methods.

How can I use XSS in rails 3 to enable multi-page viewing of site elements of our site on another site? As far as I understand, we need to get the correct JSON protocol, individual rendering on the JSON client website, and also maintain the state between page changes during the payment process and the shopping cart.

Ifraters certainly seem lighter, but I am open to discussion around this and an explanation of the use of XSS.

Answer 1

You need JSONP to execute cross-domain scripts. This is a good article explaining this: http://emphaticsolutions.com/2011/01/21/functional-widgets-with-rails-javascript-jsonp.html

Is it discussing iframe vs jsonp: JSONP vs IFrame ?

Also learn more about JSONP: https://www.google.com/search?q=writing%20widgets%20with%20jsonp