Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Working with multiple domains

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for Kristian PD Kristian PD
September 13, 2012
Programming
140
3

Working with multiple domains

Brief overview of many considerations related to dealing with multiple domains.

Avatar for Kristian PD

Kristian PD

September 13, 2012

More Decks by Kristian PD

See All by Kristian PD
batman.js state of the union
Avatar for Kristian PD kristianpd
1
170

Other Decks in Programming

See All in Programming
これって Effect でできたのでは? / TSKaigi Mashup Kansai #2
Avatar for Susisu susisu
0
240
Apache Hive: Toward a Cloud Native Lakehouse
Avatar for okumin okumin
0
190
数百円から始めるRuby電子工作
Avatar for Tarosa tarosay
0
150
JAWS-UG横浜 #102 AWSサ終供養LT会 成仏できない AWS サービスたち 〜本日、三体供養します〜
Avatar for maroon1st maroon1st
0
360
為什麼你並不需要ViewModel / No, you don't need a ViewModel
Avatar for Elvis Shi lovee
1
490
ソフトウェア設計に溶けるインフラ ― AWS CDK のインフラ認識論
Avatar for Kenji Kono konokenj
3
780
生成AIで帳票OCRが「簡単に」作れる時代になった？
Avatar for Shohei Kondo kon_shou
0
870
Google Apps Script で Ruby を動かす
Avatar for Shogo Kawahara kawahara
0
220
源内ハンズオン概要編
Avatar for Hideyuki Nagata hideg
0
170
AIが無かった頃の素敵な出会いの話
Avatar for コドモン開発チーム codmoninc
1
430
仕様駆動開発の消費期限
Avatar for watany watany
20
8.2k
そこに3びきプロダクトがいるじゃろう——生成AI時代における“価値が届かない理由”の構造
Avatar for kosuke T kosuket
0
480

Featured

See All Featured
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
9
1.1k
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
470
Stewardship and Sustainability of Urban and Community Forests
Avatar for Eric Wiseman pwiseman
0
460
Marketing Yourself as an Engineer | Alaka | Gurzu
Avatar for Gurzu gurzu
0
280
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
38
3k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
274
21k
brightonSEO & MeasureFest 2025 - Christian Goodrich - Winning strategies for Black Friday CRO & PPC
Avatar for Christian Goodrich cargoodrich
3
770
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
85
9.6k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
2
53k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
4.3M
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1369
210k
Navigating Team Friction
Avatar for Lara Hogan lara
192
16k

Transcript

  1. WORKING WITH multiple DOMAINS Tuesday, 18 September, 12

  2. What do we want to do? Tuesday, 18 September, 12

  3. What do we want to do? track customers Tuesday, 18

    September, 12

  4. What do we want to do? track customers get external

    content Tuesday, 18 September, 12

  5. What do we want to do? track customers get external

    content update data in realtime Tuesday, 18 September, 12

  6. What can we use? Tuesday, 18 September, 12

  7. What can we use? cookies Tuesday, 18 September, 12

  8. What can we use? cookies pixels Tuesday, 18 September, 12

  9. What can we use? cookies iframes pixels forms Tuesday, 18

    September, 12

  10. What can we use? cookies jsonp cors iframes pixels forms

    Tuesday, 18 September, 12

  11. can’t we all just get along? Tuesday, 18 September, 12

  12. the internet is a mean place Tuesday, 18 September, 12

  13. same origin policy Tuesday, 18 September, 12

  14. http://shop.myshopify.com/admin Tuesday, 18 September, 12

  15. http://shop.myshopify.com/admin protocol host (port) MUST MATCH Tuesday, 18 September, 12

  16. it’s not that bad Tuesday, 18 September, 12

  17. http != https Tuesday, 18 September, 12

  18. http != https Tuesday, 18 September, 12

  19. http != https Tuesday, 18 September, 12

  20. http != https proxy Tuesday, 18 September, 12

  21. <iframe> http != https Tuesday, 18 September, 12

  22. <iframe> http != https http + https = Tuesday, 18

    September, 12

  23. <iframe> http != https http + https = https +

    http = Tuesday, 18 September, 12

  24. protocol independent URL http != https //shop.myshopify.com Tuesday, 18 September,

    12

  25. how can we use this? Tuesday, 18 September, 12

  26. COOKIES Tuesday, 18 September, 12

  27. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; cookie data REVIEW Tuesday,

    18 September, 12

  28. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; domain REVIEW Tuesday, 18

    September, 12

  29. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; expiry REVIEW Tuesday, 18

    September, 12

  30. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly https only REVIEW Tuesday,

    18 September, 12

  31. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly no javascript REVIEW Tuesday,

    18 September, 12

  32. 3rd party cookies Tuesday, 18 September, 12

  33. 3rd party cookies can be disabled Tuesday, 18 September, 12

  34. <iframe> + <form> POST HACK Tuesday, 18 September, 12

  35. cross-domain ...asynchronously Tuesday, 18 September, 12

  36. JSONP JSON with Padding Tuesday, 18 September, 12

  37. JSONP browser requests Tuesday, 18 September, 12

  38. server renders JSON with Padding JSONP Tuesday, 18 September, 12

  39. javascript is returned JSONP Tuesday, 18 September, 12

  40. CORS Cross-origin-resource-sharing Tuesday, 18 September, 12

  41. CORS Access-Control-Allow-Origin: https://shop.myshopify.com Tuesday, 18 September, 12

  42. Access-Control-Allow-Headers: GET, POST, PUT, DELETE Content-Type: application/json CORS Access-Control-Allow-Origin: https://shop.myshopify.com

    Tuesday, 18 September, 12

  43. postMessage Tuesday, 18 September, 12

  44. postMessage sending Tuesday, 18 September, 12

  45. postMessage sending Reference to the other window Tuesday, 18 September,

    12

  46. postMessage sending Data you want to send Tuesday, 18 September,

    12

  47. postMessage sending Origin of the target window Tuesday, 18 September,

    12

  48. postMessage sending Origin of the target window be explicit, avoid

    * Tuesday, 18 September, 12

  49. postMessage receiving Tuesday, 18 September, 12

  50. postMessage receiving be explicit, avoid * Tuesday, 18 September, 12

  51. thanks Tuesday, 18 September, 12