In order to cope with same-origins policy for AJAX calls I want to allow for mod_rewrite and mod_proxy to handle these calls in a similar way as described in another answer:
rewriteEngine on
rewriteRule proxy/(.+)$ http://api.example.com/$1 [P]
However, I am reading all through the web that the use of mod_proxy can be a risky business.
So my question is: Are there any security concerns about enabling mod_proxy and using it in the way given above? If so, what configuration should I choose to use a mod_proxy gateway in a safe way?
Thanks, any help is appreciated.
PS: And yes, I am aware that CORS is a more reasonable way to solve the same-origins problem, but the remote site I am working with is a little bit reluctant to support CORS, so I have to look for alternatives.