Cross Domain Access Policy solution using Cross Origin Resource sharing

•Télécharger en tant que PPT, PDF•

1 j'aime•2,338 vues

Ankit Garg

Technologie

Breaking The Cross Domain Barrier ,[object Object]

A Story... ,[object Object],[object Object],[object Object]

Same Origin Policy ,[object Object],[object Object]

Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

YEA BUT WHAT IF... ,[object Object],[object Object],[object Object]

<RecordScratch.wav> ,[object Object],[object Object],[object Object]

Some Options ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Post Message ,[object Object],[object Object]

Post Message ,[object Object],[object Object],[object Object],[object Object],What’s it good for?

Post Message Works In... ,[object Object],[object Object],[object Object],[object Object],[object Object]

JSONEN JavaScript Object Notation Except Not **Formerly JSONP

JSON ,[object Object],[object Object],[object Object]

JSONP - Why it’s special ,[object Object],[object Object]

How JSONP Works ,[object Object],hint-hint

JSONP Is Good For... ,[object Object],[object Object],[object Object],[object Object]

CORS - From the Server... ,[object Object],[object Object]

CORS - Compatibility ,[object Object],[object Object],[object Object],[object Object],Unrelated Graph

CORS - What’s it Good For? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Document.domain Hackz ,[object Object],[object Object],[object Object],[object Object]

Window.name ,[object Object],[object Object],**This is obviously a little simplified Added to Dojo 2 years ago: http://bugs.dojotoolkit.org/ticket/6893

Server Side Proxies ,[object Object],mySite yourSite myServer http://benalman.com/projects/php-simple-proxy/ Works everywhere XHR does

Crazy iFrame Hacks ,[object Object],[object Object],[object Object],FACTS

Crazy iFrame Hacks ,[object Object],a.com b.com a.com

Crazy iFrame Hacks ,[object Object],a.com b.com a.com Change the url hash on the innermost iframe to the message /#secret

Crazy iFrame Hacks ,[object Object],a.com b.com a.com Have the top level frame read the message on the hash /#secret

Crazy iFrame Hacks ,[object Object],[object Object],[object Object],How to know when to receive data Fast (where it works)

Crazy iFrame Hacks ,[object Object],[object Object]

Best of both worlds? ,[object Object],A library that will use postMessage first and then a series of different techniques based on which browser you use, but with normalized syntax. http://easyxdm.net/

Best of Both Worlds? ,[object Object],http://flxhr.flensed.com/

What about cookies? ,[object Object],[object Object]

What about cookies in Safari? ,[object Object],[object Object]

What about cookies in Safari? If we post to an iframe it will thank us by sending cookies http://anantgarg.com/2010/02/18/cross-domain-cookies-in-safari/

Why Cookies? ,[object Object],TotallyNotTrackingYou.com Other Sites Holds your unique cookie

Lessons ,[object Object],[object Object],[object Object]

Thanks! ,[object Object],[object Object],[object Object],[object Object],[object Object]

Recommandé

Going Beyond Cross Domain Boundaries (jQuery Bulgaria)Ivo Andreev

Cross Domain Access Policy solution using Cross Origin Resource sharingAnkit Garg

Designing Teams for Emerging ChallengesAaron Irizarry

Visual Design with DataSeth Familian

Build Features, Not AppsNatasha Murashev

2024 State of Marketing Report – by HubspotMarius Sescu

Everything You Need To Know About ChatGPTExpeed Software

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

Recommandé

Going Beyond Cross Domain Boundaries (jQuery Bulgaria)Ivo Andreev

Cross Domain Access Policy solution using Cross Origin Resource sharingAnkit Garg

Designing Teams for Emerging ChallengesAaron Irizarry

Visual Design with DataSeth Familian

Build Features, Not AppsNatasha Murashev

2024 State of Marketing Report – by HubspotMarius Sescu

Everything You Need To Know About ChatGPTExpeed Software

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya

Why Teams call analytics are critical to your entire businesspanagenda

WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2

Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services

Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Victor Rentea

Elevate Developer Efficiency & build GenAI Application with Amazon QBhuvaneswari Subramani

DBX First Quarter 2024 Investor PresentationDropbox

Understanding the FAA Part 107 License ..Christopher Logan Kennedy

ICT role in 21st century education and its challengesrafiqahmad00786416

MS Copilot expands with MS Graph connectorsNanddeep Nachan

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays

FWD Group - Insurer Innovation Award 2024The Digital Insurer

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...apidays

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Jeffrey Haguewood

Apidays New York 2024 - The value of a flexible API Management solution for O...apidays

Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelDeepika Singh

DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamUiPathCommunity

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...apidays

MINDCTI Revenue Release Quarter One 2024MIND CTI

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

Contenu connexe

Dernier

Artificial Intelligence Chap.5 : UncertaintyKhushali Kathiriya

Why Teams call analytics are critical to your entire businesspanagenda

WSO2's API Vision: Unifying Control, Empowering DevelopersWSO2

Vector Search -An Introduction in Oracle Database 23ai.pptxRemote DBA Services

Strategies for Landing an Oracle DBA Job as a FresherRemote DBA Services

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024Victor Rentea

Elevate Developer Efficiency & build GenAI Application with Amazon QBhuvaneswari Subramani

DBX First Quarter 2024 Investor PresentationDropbox

Understanding the FAA Part 107 License ..Christopher Logan Kennedy

ICT role in 21st century education and its challengesrafiqahmad00786416

MS Copilot expands with MS Graph connectorsNanddeep Nachan

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...apidays

FWD Group - Insurer Innovation Award 2024The Digital Insurer

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...apidays

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Jeffrey Haguewood

Apidays New York 2024 - The value of a flexible API Management solution for O...apidays

Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot ModelDeepika Singh

DEV meet-up UiPath Document Understanding May 7 2024 AmsterdamUiPathCommunity

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...apidays

MINDCTI Revenue Release Quarter One 2024MIND CTI

Dernier (20)

Artificial Intelligence Chap.5 : Uncertainty

Why Teams call analytics are critical to your entire business

WSO2's API Vision: Unifying Control, Empowering Developers

Vector Search -An Introduction in Oracle Database 23ai.pptx

Strategies for Landing an Oracle DBA Job as a Fresher

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Elevate Developer Efficiency & build GenAI Application with Amazon Q

DBX First Quarter 2024 Investor Presentation

Understanding the FAA Part 107 License ..

ICT role in 21st century education and its challenges

MS Copilot expands with MS Graph connectors

Apidays New York 2024 - The Good, the Bad and the Governed by David O'Neill, ...

FWD Group - Insurer Innovation Award 2024

Apidays New York 2024 - Passkeys: Developing APIs to enable passwordless auth...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Apidays New York 2024 - The value of a flexible API Management solution for O...

Mcleodganj Call Girls 🥰 8617370543 Service Offer VIP Hot Model

DEV meet-up UiPath Document Understanding May 7 2024 Amsterdam

Apidays New York 2024 - APIs in 2030: The Risk of Technological Sleepwalk by ...

MINDCTI Revenue Release Quarter One 2024

En vedette

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

Skeleton Culture CodeSkeleton Technologies

PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley

Content Methodology: A Best Practices Report (Webinar)contently

How to Prepare For a Successful Job Search for 2024Albert Qian

Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)

Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal

5 Public speaking tips from TED - Visualized summarySpeakerHub

ChatGPT and the Future of Work - Clark Boyd Clark Boyd

Getting into the tech field. what next Tessa Mero

Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray

How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC

Introduction to Data ScienceChristy Abraham Joy

Time Management & Productivity - Best PracticesVit Horky

The six step guide to practical project managementMindGenius

Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...RachelPearson36

Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Applitools

12 Ways to Increase Your Influence at WorkGetSmarter

ChatGPT webinar slidesAlireza Esmikhani

En vedette (20)

How Race, Age and Gender Shape Attitudes Towards Mental Health

AI Trends in Creative Operations 2024 by Artwork Flow.pdf

Skeleton Culture Code

PEPSICO Presentation to CAGNY Conference Feb 2024

Content Methodology: A Best Practices Report (Webinar)

How to Prepare For a Successful Job Search for 2024

Social Media Marketing Trends 2024 // The Global Indie Insights

Trends In Paid Search: Navigating The Digital Landscape In 2024

5 Public speaking tips from TED - Visualized summary

ChatGPT and the Future of Work - Clark Boyd

Getting into the tech field. what next

Google's Just Not That Into You: Understanding Core Updates & Search Intent

How to have difficult conversations

Introduction to Data Science

Time Management & Productivity - Best Practices

The six step guide to practical project management

Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...

Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...

12 Ways to Increase Your Influence at Work

ChatGPT webinar slides

Cross Domain Access Policy solution using Cross Origin Resource sharing

4. Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

5. Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

10.

11.

12.

13.

14.

15.

16. JSONEN JavaScript Object Notation Except Not **Formerly JSONP

17.

18.

19.

20.

21.

22.

23.

24.

25. CORS - HOW?

26.

27.

28.

29.

30.

31. Window.name HI! I’m Jerry the Window!

32.

33.

34.

35.

36.

37.

38.

39.

40.

41.

42.

43.

44. What about cookies in Safari? If we post to an iframe it will thank us by sending cookies http://anantgarg.com/2010/02/18/cross-domain-cookies-in-safari/

45.

46.

47.