// Copyright 2008 Google Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gwtjsonrpc.client;

import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

/**
 * Annotation permitting a cross-site request without the XSRF token.
 * <p>
 * This annotation should only be placed on {@link RemoteJsonService} methods
 * which are read-only (change no server state) and which the server wants to
 * export for general query use by any mash-up sort of application.
 */
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
public @interface AllowCrossSiteRequest {
}

@@ -985,16 +985,82 @@
 r state)
+, which expose no private%0A * information about the browser's user,
  and whi
@@ -1085,18 +1085,18 @@
 s to
-%0A *
  export
+%0A *
  for
@@ -1150,16 +1150,215 @@
 cation.%0A
+ * %3Cp%3E%0A * %3Cb%3EMethods tagged with this annotation should only be on publicly known data,%0A * e.g. data which is more readily available through sources other than this%0A * based JSON service method.%3C/b%3E%0A
  */%0A@Ret

Make the warning about AllowCrossSiteRequest more clear