Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Working with multiple domains

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Kristian PD Kristian PD
September 13, 2012
Programming
3
130

Working with multiple domains

Brief overview of many considerations related to dealing with multiple domains.

Avatar for Kristian PD

Kristian PD

September 13, 2012
Tweet

More Decks by Kristian PD

See All by Kristian PD
batman.js state of the union
Avatar for Kristian PD kristianpd
1
160

Other Decks in Programming

See All in Programming
dchart: charts from deck markup
Avatar for Anthony Starks ajstarks
3
970
Honoを使ったリモートMCPサーバでAIツールとの連携を加速させる！
Avatar for とすり tosuri13
1
150
Findy AI+の開発、運用におけるMCP活用事例
Avatar for starfish719 starfish719
0
2.3k
gunshi
Avatar for kazupon kazupon
1
140
re:Invent 2025 トレンドからみる製品開発への AI Agent 活用
Avatar for Kohei Yoshikawa yoskoh
0
680
PostgreSQLで手軽にDuckDBを使う！DuckDB&pg_duckdb入門/osc25hi-duckdb
Avatar for Takahashi Ikki takahashiikki
0
260
[AtCoder Conference 2025] LLMを使った業務AHCの上⼿な解き⽅
Avatar for terry-u16 terryu16
6
1.1k
從冷知識到漏洞，你不懂的 Web，駭客懂 - Huli @ WebConf Taiwan 2025
Avatar for Huli aszx87410
2
3.4k
CSC307 Lecture 02
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
1
770
組織で育むオブザーバビリティ
Avatar for ryotaro kobayashi ryota_hnk
0
130
余白を設計しフロントエンド開発を 加速させる
Avatar for karacoro / からころ tsukuha
7
1.9k
高速開発のためのコード整理術
Avatar for sutetotanuki sutetotanuki
1
300

Featured

See All Featured
世界の人気アプリ100個を分析して見えたペイウォール設計の心得
Avatar for Akihiro Kokubo akihiro_kokubo
PRO
66
36k
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
370
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
273
21k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
7.9k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
88
5k
Kristin Tynski - Automating Marketing Tasks With AI
Avatar for Tech SEO Connect techseoconnect
PRO
0
120
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
9.4k
SEO Brein meetup: CTRL+C is not how to scale international SEO
Avatar for Linda Hogenes lindahogenes
0
2.3k
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
12
1.4k
Designing Experiences People Love
Avatar for Jonathan Moore moore
143
24k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
37
7.1k
How to build an LLM SEO readiness audit: a practical framework
Avatar for Nick Samuel nmsamuel
1
620

Transcript

  1. WORKING WITH multiple DOMAINS Tuesday, 18 September, 12

  2. What do we want to do? Tuesday, 18 September, 12

  3. What do we want to do? track customers Tuesday, 18

    September, 12

  4. What do we want to do? track customers get external

    content Tuesday, 18 September, 12

  5. What do we want to do? track customers get external

    content update data in realtime Tuesday, 18 September, 12

  6. What can we use? Tuesday, 18 September, 12

  7. What can we use? cookies Tuesday, 18 September, 12

  8. What can we use? cookies pixels Tuesday, 18 September, 12

  9. What can we use? cookies iframes pixels forms Tuesday, 18

    September, 12

  10. What can we use? cookies jsonp cors iframes pixels forms

    Tuesday, 18 September, 12

  11. can’t we all just get along? Tuesday, 18 September, 12

  12. the internet is a mean place Tuesday, 18 September, 12

  13. same origin policy Tuesday, 18 September, 12

  14. http://shop.myshopify.com/admin Tuesday, 18 September, 12

  15. http://shop.myshopify.com/admin protocol host (port) MUST MATCH Tuesday, 18 September, 12

  16. it’s not that bad Tuesday, 18 September, 12

  17. http != https Tuesday, 18 September, 12

  18. http != https Tuesday, 18 September, 12

  19. http != https Tuesday, 18 September, 12

  20. http != https proxy Tuesday, 18 September, 12

  21. <iframe> http != https Tuesday, 18 September, 12

  22. <iframe> http != https http + https = Tuesday, 18

    September, 12

  23. <iframe> http != https http + https = https +

    http = Tuesday, 18 September, 12

  24. protocol independent URL http != https //shop.myshopify.com Tuesday, 18 September,

    12

  25. how can we use this? Tuesday, 18 September, 12

  26. COOKIES Tuesday, 18 September, 12

  27. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; cookie data REVIEW Tuesday,

    18 September, 12

  28. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; domain REVIEW Tuesday, 18

    September, 12

  29. Set-Cookie: foo=bar; Domain=.myshopify.com; Path=/; Expires=Fri, 14-Sep-2020; expiry REVIEW Tuesday, 18

    September, 12

  30. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly https only REVIEW Tuesday,

    18 September, 12

  31. Set-Cookie: session_id=abc123; Domain=shop.myshopify.com; Path=/admin; Secure; HttpOnly no javascript REVIEW Tuesday,

    18 September, 12

  32. 3rd party cookies Tuesday, 18 September, 12

  33. 3rd party cookies can be disabled Tuesday, 18 September, 12

  34. <iframe> + <form> POST HACK Tuesday, 18 September, 12

  35. cross-domain ...asynchronously Tuesday, 18 September, 12

  36. JSONP JSON with Padding Tuesday, 18 September, 12

  37. JSONP browser requests Tuesday, 18 September, 12

  38. server renders JSON with Padding JSONP Tuesday, 18 September, 12

  39. javascript is returned JSONP Tuesday, 18 September, 12

  40. CORS Cross-origin-resource-sharing Tuesday, 18 September, 12

  41. CORS Access-Control-Allow-Origin: https://shop.myshopify.com Tuesday, 18 September, 12

  42. Access-Control-Allow-Headers: GET, POST, PUT, DELETE Content-Type: application/json CORS Access-Control-Allow-Origin: https://shop.myshopify.com

    Tuesday, 18 September, 12

  43. postMessage Tuesday, 18 September, 12

  44. postMessage sending Tuesday, 18 September, 12

  45. postMessage sending Reference to the other window Tuesday, 18 September,

    12

  46. postMessage sending Data you want to send Tuesday, 18 September,

    12

  47. postMessage sending Origin of the target window Tuesday, 18 September,

    12

  48. postMessage sending Origin of the target window be explicit, avoid

    * Tuesday, 18 September, 12

  49. postMessage receiving Tuesday, 18 September, 12

  50. postMessage receiving be explicit, avoid * Tuesday, 18 September, 12

  51. thanks Tuesday, 18 September, 12