You should really make sure to properly encode this JSON. JSON.stringify
is the most reliable method:
data: JSON.stringify({ accessCode: code, newURL: url })
This ensures that even if the code
and url
variables contain some dangerous characters that will break your string concatenations in the resulting JSON at the end everything will be properly encoded. The JSON.stringify method is natievly built into modern browsers but if you need to support legacy you could include json2.js.
Also because you code is no longer blocking you should make sure that if you call this sendUpdate
from some button click or form submit you cancel the default action by returning false.