Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Working with multiple domains

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Kristian PD Kristian PD
September 13, 2012
Programming
130
3

Working with multiple domains

Brief overview of many considerations related to dealing with multiple domains.

Avatar for Kristian PD

Kristian PD

September 13, 2012

More Decks by Kristian PD

See All by Kristian PD
batman.js state of the union
Avatar for Kristian PD kristianpd
1
160

Other Decks in Programming

See All in Programming
Cache-moi si tu peux : patterns et pièges du cache en production - Devoxx France 2026 - Conférence
Avatar for Sébastien LECACHEUR slecache
0
210
Offline should be the norm: building local-first apps with CRDTs & Kotlin Multiplatform
Avatar for Renaud MATHIEU renaudmathieu
0
210
「効かない！」依存性注入（DI）を活用したAPI Platformのエラーハンドリング奮闘記
Avatar for Maki Hayashi mkmk884
1
330
RSAが破られる前に知っておきたい 耐量子計算機暗号(PQC)入門 / Intro to PQC: Preparing for the Post-RSA Era
Avatar for mackey0225 mackey0225
3
130
今こそ押さえておきたい アマゾンウェブサービス（AWS）の データベースの基礎 おもクラ #6版
Avatar for Satoshi Kaneyasu satoshi256kbyte
1
240
Codex CLI でつくる、Issue から merge までの開発フロー
Avatar for amata1219 amata1219
0
350
事業会社でのセキュリティ長期インターンについて
Avatar for inlet-back masachikaura
0
250
Getting more out of Maven
Avatar for Marit van Dijk mlvandijk
0
110
ふりがな Deep Dive try! Swift Tokyo 2026
Avatar for watura watura
0
210
煩雑なSkills管理をSoC（関心の分離）により解決する――関心を分離し、プロンプトを部品として育てるためのOSSを作った話 / Solving Complex Skills Management Through SoC (Separation of Concerns)
Avatar for nrs nrslib
4
890
ドメインイベントでビジネスロジックを解きほぐす #phpcon_odawara
Avatar for Takuma Kajikawa kajitack
3
750
CursorとClaudeCodeとCodexとOpenCodeを実際に比較してみた
Avatar for Terisuke terisuke
1
450

Featured

See All Featured
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
570
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
Avatar for Helen Beal helenjbeal
1
160
SERP Conf. Vienna - Web Accessibility: Optimizing for Inclusivity and SEO
Avatar for Sara Fernández Carmona sarafernandez
2
1.4k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
22k
Done Done
Avatar for chrislema chrislema
186
16k
Become a Pro
Avatar for Speaker Deck speakerdeck
PRO
31
5.9k
Sam Torres - BigQuery for SEOs
Avatar for Tech SEO Connect techseoconnect
PRO
0
240
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
120k
Designing for Timeless Needs
Avatar for Cassini Nazir cassininazir
0
190
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
122
21k
Ten Tips & Tricks for a 🌱 transition
Avatar for Manu Carrasco Molina stuffmc
0
98
Optimising Largest Contentful Paint
Avatar for Harry Roberts csswizardry
37
3.6k

Transcript

  1. WORKING WITH multiple DOMAINS Tuesday, 18 September, 12

  2. What do we want to do? Tuesday, 18 September, 12

  3. What do we want to do? track customers Tuesday, 18

    September, 12

  4. What do we want to do? track customers get external

    content Tuesday, 18 September, 12

  5. What do we want to do? track customers get external

    content update data in realtime Tuesday, 18 September, 12

  6. What can we use? Tuesday, 18 September, 12

  7. What can we use? cookies Tuesday, 18 September, 12

  8. What can we use? cookies pixels Tuesday, 18 September, 12

  9. What can we use? cookies iframes pixels forms Tuesday, 18

    September, 12

  10. What can we use? cookies jsonp cors iframes pixels forms

    Tuesday, 18 September, 12

  11. can’t we all just get along? Tuesday, 18 September, 12

  12. the internet is a mean place Tuesday, 18 September, 12

  13. same origin policy Tuesday, 18 September, 12

  14. http://shop.myshopify.com/admin Tuesday, 18 September, 12

  15. http://shop.myshopify.com/admin protocol host (port) MUST MATCH Tuesday, 18 September, 12

  16. it’s not that bad Tuesday, 18 September, 12

  17. http != https Tuesday, 18 September, 12

  18. http != https Tuesday, 18 September, 12

  19. http != https Tuesday, 18 September, 12

  20. http != https proxy Tuesday, 18 September, 12

  21. <iframe> http != https Tuesday, 18 September, 12

  22. <iframe> http != https http + https = Tuesday, 18

    September, 12

  23. <iframe> http != https http + https = https +

    http = Tuesday, 18 September, 12

  24. protocol independent URL http != https //shop.myshopify.com Tuesday, 18 September,

    12

  25. how can we use this? Tuesday, 18 September, 12

  26. COOKIES Tuesday, 18 September, 12

  27. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; cookie data REVIEW Tuesday,

    18 September, 12

  28. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; domain REVIEW Tuesday, 18

    September, 12

  29. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; expiry REVIEW Tuesday, 18

    September, 12

  30. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly https only REVIEW Tuesday,

    18 September, 12

  31. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly no javascript REVIEW Tuesday,

    18 September, 12

  32. 3rd party cookies Tuesday, 18 September, 12

  33. 3rd party cookies can be disabled Tuesday, 18 September, 12

  34. <iframe> + <form> POST HACK Tuesday, 18 September, 12

  35. cross-domain ...asynchronously Tuesday, 18 September, 12

  36. JSONP JSON with Padding Tuesday, 18 September, 12

  37. JSONP browser requests Tuesday, 18 September, 12

  38. server renders JSON with Padding JSONP Tuesday, 18 September, 12

  39. javascript is returned JSONP Tuesday, 18 September, 12

  40. CORS Cross-origin-resource-sharing Tuesday, 18 September, 12

  41. CORS Access-Control-Allow-Origin: https://shop.myshopify.com Tuesday, 18 September, 12

  42. Access-Control-Allow-Headers: GET, POST, PUT, DELETE Content-Type: application/json CORS Access-Control-Allow-Origin: https://shop.myshopify.com

    Tuesday, 18 September, 12

  43. postMessage Tuesday, 18 September, 12

  44. postMessage sending Tuesday, 18 September, 12

  45. postMessage sending Reference to the other window Tuesday, 18 September,

    12

  46. postMessage sending Data you want to send Tuesday, 18 September,

    12

  47. postMessage sending Origin of the target window Tuesday, 18 September,

    12

  48. postMessage sending Origin of the target window be explicit, avoid

    * Tuesday, 18 September, 12

  49. postMessage receiving Tuesday, 18 September, 12

  50. postMessage receiving be explicit, avoid * Tuesday, 18 September, 12

  51. thanks Tuesday, 18 September, 12