Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Working with multiple domains

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Kristian PD Kristian PD
September 13, 2012
Programming
130
3

Working with multiple domains

Brief overview of many considerations related to dealing with multiple domains.

Avatar for Kristian PD

Kristian PD

September 13, 2012

More Decks by Kristian PD

See All by Kristian PD
batman.js state of the union
Avatar for Kristian PD kristianpd
1
170

Other Decks in Programming

See All in Programming
A2UI という光を覗いてみる
Avatar for SatohJohn satohjohn
1
140
Spec Driven Development | AI Summit Lisbon
Avatar for Daniel Sogl danielsogl
PRO
0
190
RTSPクライアントを自作してみた話
Avatar for simotin13 simotin13
0
610
[2026年度第1回ORセミナー] 計画最適化ベンチャーと競技プログラミング人材
Avatar for terry-u16 terryu16
0
260
AI時代の仕事技芸論 — ソフトウェア開発で「遊ぶように働く」職人的熟達のすすめ
Avatar for Yoshihito Kuranuki / 倉貫義人 kuranuki
2
680
Even G2とAWSで推しのエージェントを召喚しよう！
Avatar for Har1101 har1101
1
110
JavaDoc 再入門
Avatar for nagise nagise
1
350
気づいたらRubyで100作品 ー クリエイティブコーディングが生活の一部になるまで / 100 Ruby Sketches Later: How Creative Coding Became Part of My Life
Avatar for chobishiba chobishiba
3
580
Developing with AI Agents — Codex, Claude Code & Cowork Practical Guide
Avatar for Daisuke Masuda x5gtrn
PRO
0
1.3k
過去最大のMCPアップデート! 2026-07-28 RC版の謎に迫る
Avatar for matsukada licux
6
330
スマートグラスで並列バイブコーディング
Avatar for Hayami Shuhei hyshu
0
140
Semantic Version 単位で戦略を柔軟に変えて、パッケージアップデートを自動化する
Avatar for daitasu daitasu
1
240

Featured

See All Featured
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
40k
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
8
710
The Curse of the Amulet
Avatar for Matthew Lei leimatthew05
1
13k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
3.7M
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
7.1k
HDC tutorial
Avatar for Michiel Stock michielstock
2
710
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
59
6.7k
Done Done
Avatar for chrislema chrislema
186
16k
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
22k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
11k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
460
How People are Using Generative and Agentic AI to Supercharge Their Products, Projects, Services and Value Streams Today
Avatar for Helen Beal helenjbeal
1
210

Transcript

  1. WORKING WITH multiple DOMAINS Tuesday, 18 September, 12

  2. What do we want to do? Tuesday, 18 September, 12

  3. What do we want to do? track customers Tuesday, 18

    September, 12

  4. What do we want to do? track customers get external

    content Tuesday, 18 September, 12

  5. What do we want to do? track customers get external

    content update data in realtime Tuesday, 18 September, 12

  6. What can we use? Tuesday, 18 September, 12

  7. What can we use? cookies Tuesday, 18 September, 12

  8. What can we use? cookies pixels Tuesday, 18 September, 12

  9. What can we use? cookies iframes pixels forms Tuesday, 18

    September, 12

  10. What can we use? cookies jsonp cors iframes pixels forms

    Tuesday, 18 September, 12

  11. can’t we all just get along? Tuesday, 18 September, 12

  12. the internet is a mean place Tuesday, 18 September, 12

  13. same origin policy Tuesday, 18 September, 12

  14. http://shop.myshopify.com/admin Tuesday, 18 September, 12

  15. http://shop.myshopify.com/admin protocol host (port) MUST MATCH Tuesday, 18 September, 12

  16. it’s not that bad Tuesday, 18 September, 12

  17. http != https Tuesday, 18 September, 12

  18. http != https Tuesday, 18 September, 12

  19. http != https Tuesday, 18 September, 12

  20. http != https proxy Tuesday, 18 September, 12

  21. <iframe> http != https Tuesday, 18 September, 12

  22. <iframe> http != https http + https = Tuesday, 18

    September, 12

  23. <iframe> http != https http + https = https +

    http = Tuesday, 18 September, 12

  24. protocol independent URL http != https //shop.myshopify.com Tuesday, 18 September,

    12

  25. how can we use this? Tuesday, 18 September, 12

  26. COOKIES Tuesday, 18 September, 12

  27. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; cookie data REVIEW Tuesday,

    18 September, 12

  28. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; domain REVIEW Tuesday, 18

    September, 12

  29. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; expiry REVIEW Tuesday, 18

    September, 12

  30. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly https only REVIEW Tuesday,

    18 September, 12

  31. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly no javascript REVIEW Tuesday,

    18 September, 12

  32. 3rd party cookies Tuesday, 18 September, 12

  33. 3rd party cookies can be disabled Tuesday, 18 September, 12

  34. <iframe> + <form> POST HACK Tuesday, 18 September, 12

  35. cross-domain ...asynchronously Tuesday, 18 September, 12

  36. JSONP JSON with Padding Tuesday, 18 September, 12

  37. JSONP browser requests Tuesday, 18 September, 12

  38. server renders JSON with Padding JSONP Tuesday, 18 September, 12

  39. javascript is returned JSONP Tuesday, 18 September, 12

  40. CORS Cross-origin-resource-sharing Tuesday, 18 September, 12

  41. CORS Access-Control-Allow-Origin: https://shop.myshopify.com Tuesday, 18 September, 12

  42. Access-Control-Allow-Headers: GET, POST, PUT, DELETE Content-Type: application/json CORS Access-Control-Allow-Origin: https://shop.myshopify.com

    Tuesday, 18 September, 12

  43. postMessage Tuesday, 18 September, 12

  44. postMessage sending Tuesday, 18 September, 12

  45. postMessage sending Reference to the other window Tuesday, 18 September,

    12

  46. postMessage sending Data you want to send Tuesday, 18 September,

    12

  47. postMessage sending Origin of the target window Tuesday, 18 September,

    12

  48. postMessage sending Origin of the target window be explicit, avoid

    * Tuesday, 18 September, 12

  49. postMessage receiving Tuesday, 18 September, 12

  50. postMessage receiving be explicit, avoid * Tuesday, 18 September, 12

  51. thanks Tuesday, 18 September, 12