Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Working with multiple domains

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Kristian PD Kristian PD
September 13, 2012
Programming
3
130

Working with multiple domains

Brief overview of many considerations related to dealing with multiple domains.

Avatar for Kristian PD

Kristian PD

September 13, 2012
Tweet

More Decks by Kristian PD

See All by Kristian PD
batman.js state of the union
Avatar for Kristian PD kristianpd
1
160

Other Decks in Programming

See All in Programming
仕様漏れ実装漏れをなくすトレーサビリティAI基盤のご紹介
Avatar for Kuniwak orgachem
PRO
7
3.2k
Goの型安全性で実現する複数プロダクトの権限管理
Avatar for ishikawa-pro ishikawa_pro
2
1.4k
Feature Toggle は捨てやすく使おう
Avatar for gennei gennei
0
360
ロボットのための工場に灯りは要らない
Avatar for watany watany
12
3.2k
モダンOBSプラグイン開発
Avatar for Kaito Udagawa umireon
0
180
Ruby and LLM Ecosystem 2nd
Avatar for Koichi ITO koic
1
1.3k
へんな働き方
Avatar for Yusuke Wada yusukebe
6
2.8k
ネイティブアプリとWebフロントエンドのAPI通信ラッパーにおける共通化の勘所
Avatar for Suguru Ohki suguruooki
0
190
PHPのバージョンアップ時にも役立ったAST（2026年版）
Avatar for Atsushi Matsuo matsuo_atsushi
0
260
「接続」—パフォーマンスチューニングの最後の一手 〜点と点を結ぶ、その一瞬のために〜
Avatar for 武田 憲太郎 kentaroutakeda
4
2k
Understanding Apache Lucene - More than just full-text search
Avatar for Alexander Reelsen spinscale
0
140
Vuetify 3 → 4 何が変わった？差分と移行ポイント10分まとめ
Avatar for kouki.miura koukimiura
0
200

Featured

See All Featured
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
183
10k
Paper Plane (Part 1)
Avatar for Katie Cordina Lindsey katiecoart
PRO
0
6k
Building Flexible Design Systems
Avatar for Yesenia Perez-Cruz yeseniaperezcruz
330
40k
Gemini Prompt Engineering: Practical Techniques for Tangible AI Outcomes
Avatar for Mfonobong Umondia mfonobong
2
330
A Soul's Torment
Avatar for Nat Ma seathinner
5
2.5k
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
1
160
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.2k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
The Cult of Friendly URLs
Avatar for Andy Hume andyhume
79
6.8k
Dominate Local Search Results - an insider guide to GBP, reviews, and Local SEO
Avatar for Greg Gifford greggifford
PRO
0
120
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Fireside Chat
Avatar for paigeccino paigeccino
42
3.9k

Transcript

  1. WORKING WITH multiple DOMAINS Tuesday, 18 September, 12

  2. What do we want to do? Tuesday, 18 September, 12

  3. What do we want to do? track customers Tuesday, 18

    September, 12

  4. What do we want to do? track customers get external

    content Tuesday, 18 September, 12

  5. What do we want to do? track customers get external

    content update data in realtime Tuesday, 18 September, 12

  6. What can we use? Tuesday, 18 September, 12

  7. What can we use? cookies Tuesday, 18 September, 12

  8. What can we use? cookies pixels Tuesday, 18 September, 12

  9. What can we use? cookies iframes pixels forms Tuesday, 18

    September, 12

  10. What can we use? cookies jsonp cors iframes pixels forms

    Tuesday, 18 September, 12

  11. can’t we all just get along? Tuesday, 18 September, 12

  12. the internet is a mean place Tuesday, 18 September, 12

  13. same origin policy Tuesday, 18 September, 12

  14. http://shop.myshopify.com/admin Tuesday, 18 September, 12

  15. http://shop.myshopify.com/admin protocol host (port) MUST MATCH Tuesday, 18 September, 12

  16. it’s not that bad Tuesday, 18 September, 12

  17. http != https Tuesday, 18 September, 12

  18. http != https Tuesday, 18 September, 12

  19. http != https Tuesday, 18 September, 12

  20. http != https proxy Tuesday, 18 September, 12

  21. <iframe> http != https Tuesday, 18 September, 12

  22. <iframe> http != https http + https = Tuesday, 18

    September, 12

  23. <iframe> http != https http + https = https +

    http = Tuesday, 18 September, 12

  24. protocol independent URL http != https //shop.myshopify.com Tuesday, 18 September,

    12

  25. how can we use this? Tuesday, 18 September, 12

  26. COOKIES Tuesday, 18 September, 12

  27. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; cookie data REVIEW Tuesday,

    18 September, 12

  28. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; domain REVIEW Tuesday, 18

    September, 12

  29. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; expiry REVIEW Tuesday, 18

    September, 12

  30. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly https only REVIEW Tuesday,

    18 September, 12

  31. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly no javascript REVIEW Tuesday,

    18 September, 12

  32. 3rd party cookies Tuesday, 18 September, 12

  33. 3rd party cookies can be disabled Tuesday, 18 September, 12

  34. <iframe> + <form> POST HACK Tuesday, 18 September, 12

  35. cross-domain ...asynchronously Tuesday, 18 September, 12

  36. JSONP JSON with Padding Tuesday, 18 September, 12

  37. JSONP browser requests Tuesday, 18 September, 12

  38. server renders JSON with Padding JSONP Tuesday, 18 September, 12

  39. javascript is returned JSONP Tuesday, 18 September, 12

  40. CORS Cross-origin-resource-sharing Tuesday, 18 September, 12

  41. CORS Access-Control-Allow-Origin: https://shop.myshopify.com Tuesday, 18 September, 12

  42. Access-Control-Allow-Headers: GET, POST, PUT, DELETE Content-Type: application/json CORS Access-Control-Allow-Origin: https://shop.myshopify.com

    Tuesday, 18 September, 12

  43. postMessage Tuesday, 18 September, 12

  44. postMessage sending Tuesday, 18 September, 12

  45. postMessage sending Reference to the other window Tuesday, 18 September,

    12

  46. postMessage sending Data you want to send Tuesday, 18 September,

    12

  47. postMessage sending Origin of the target window Tuesday, 18 September,

    12

  48. postMessage sending Origin of the target window be explicit, avoid

    * Tuesday, 18 September, 12

  49. postMessage receiving Tuesday, 18 September, 12

  50. postMessage receiving be explicit, avoid * Tuesday, 18 September, 12

  51. thanks Tuesday, 18 September, 12