On Fri, Dec 19, 2008 at 7:34 AM, Daniel Friesen
The API supports JSONP so there should be no
issues with things like
XmlHttpRequest's same-domain limitations.
For security reasons $wgUser is stripped on json callback calls. Plus
you need to make a post request, which is not possible with <script>