What are the differences between JSON and JSONP?

JSON (JavaScript Object Notation) and JSONP (JSON with Padding) are both data interchange formats used in web development, but they have key differences in usage scenarios and functionality.

JSON

JSON is a lightweight data interchange format that is easy for humans to read and write, and easy for machines to parse and generate. It is derived from a subset of JavaScript syntax, but JSON is a language-independent text format supported by multiple programming languages.

Usage Scenarios:

• Primarily used for data transmission from server to client.
• In web applications, it can be used with AJAX technology via the XMLHttpRequest object to request JSON-formatted data.

Advantages:

• Simple syntax, easy to read and write.
• Cross-language support.

Disadvantages:

• Subject to the same-origin policy, cannot perform cross-origin requests.

Example: Suppose we need to retrieve user information from a server; the server might send JSON-formatted data like:

json
{
  "name": "张三",
  "age": 30,
  "email": "zhangsan@example.com"
}

JSONP

JSONP is a technique that enables cross-domain communication by wrapping JSON data. It works by dynamically creating <script> tags to request a JavaScript file containing JSON data.

Usage Scenarios:

• Primarily used to solve cross-domain data access issues.
• Used when retrieving data from different domains.

Advantages:

• Can bypass the same-origin policy to enable cross-domain data requests.

Disadvantages:

• Lower security, vulnerable to XSS attacks.
• Only supports GET requests.

Example: Suppose a client needs to retrieve weather information from a different domain; it can use JSONP as follows:

html
<script>
function handleResponse(data) {
  console.log("Current weather: " + data.weather);
}
</script>
<script src="https://example.com/weather?callback=handleResponse"></script>

In this example, the server needs to return a response in the following format:

javascript
handleResponse({
  "weather": "晴朗",
  "temperature": "23°C"
});

In summary, while both JSON and JSONP are data interchange formats, JSONP primarily addresses cross-domain issues, whereas JSON is a more general data interchange format. When choosing which to use, consider the specific application scenario and security requirements.