Cross Domain Access Policy solution using Cross Origin Resource sharing

•Télécharger en tant que PPT, PDF•

1 j'aime•2,338 vues

Ankit Garg

Technologie

Breaking The Cross Domain Barrier ,[object Object]

A Story... ,[object Object],[object Object],[object Object]

Same Origin Policy ,[object Object],[object Object]

Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

YEA BUT WHAT IF... ,[object Object],[object Object],[object Object]

<RecordScratch.wav> ,[object Object],[object Object],[object Object]

Some Options ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Post Message ,[object Object],[object Object]

Post Message ,[object Object],[object Object],[object Object],[object Object],What’s it good for?

Post Message Works In... ,[object Object],[object Object],[object Object],[object Object],[object Object]

JSONEN JavaScript Object Notation Except Not **Formerly JSONP

JSON ,[object Object],[object Object],[object Object]

JSONP - Why it’s special ,[object Object],[object Object]

How JSONP Works ,[object Object],hint-hint

JSONP Is Good For... ,[object Object],[object Object],[object Object],[object Object]

CORS - From the Server... ,[object Object],[object Object]

CORS - Compatibility ,[object Object],[object Object],[object Object],[object Object],Unrelated Graph

CORS - What’s it Good For? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Document.domain Hackz ,[object Object],[object Object],[object Object],[object Object]

Window.name ,[object Object],[object Object],**This is obviously a little simplified Added to Dojo 2 years ago: http://bugs.dojotoolkit.org/ticket/6893

Server Side Proxies ,[object Object],mySite yourSite myServer http://benalman.com/projects/php-simple-proxy/ Works everywhere XHR does

Crazy iFrame Hacks ,[object Object],[object Object],[object Object],FACTS

Crazy iFrame Hacks ,[object Object],a.com b.com a.com

Crazy iFrame Hacks ,[object Object],a.com b.com a.com Change the url hash on the innermost iframe to the message /#secret

Crazy iFrame Hacks ,[object Object],a.com b.com a.com Have the top level frame read the message on the hash /#secret

Crazy iFrame Hacks ,[object Object],[object Object],[object Object],How to know when to receive data Fast (where it works)

Crazy iFrame Hacks ,[object Object],[object Object]

Best of both worlds? ,[object Object],A library that will use postMessage first and then a series of different techniques based on which browser you use, but with normalized syntax. http://easyxdm.net/

Best of Both Worlds? ,[object Object],http://flxhr.flensed.com/

What about cookies? ,[object Object],[object Object]

What about cookies in Safari? ,[object Object],[object Object]

What about cookies in Safari? If we post to an iframe it will thank us by sending cookies http://anantgarg.com/2010/02/18/cross-domain-cookies-in-safari/

Why Cookies? ,[object Object],TotallyNotTrackingYou.com Other Sites Holds your unique cookie

Lessons ,[object Object],[object Object],[object Object]

Thanks! ,[object Object],[object Object],[object Object],[object Object],[object Object]

Recommandé

Going Beyond Cross Domain Boundaries (jQuery Bulgaria)Ivo Andreev

Cross Domain Access Policy solution using Cross Origin Resource sharingAnkit Garg

Designing Teams for Emerging ChallengesAaron Irizarry

Visual Design with DataSeth Familian

Build Features, Not AppsNatasha Murashev

2024 State of Marketing Report – by HubspotMarius Sescu

Everything You Need To Know About ChatGPTExpeed Software

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

Recommandé

Going Beyond Cross Domain Boundaries (jQuery Bulgaria)Ivo Andreev

Cross Domain Access Policy solution using Cross Origin Resource sharingAnkit Garg

Designing Teams for Emerging ChallengesAaron Irizarry

Visual Design with DataSeth Familian

Build Features, Not AppsNatasha Murashev

2024 State of Marketing Report – by HubspotMarius Sescu

Everything You Need To Know About ChatGPTExpeed Software

Product Design Trends in 2024 | Teenage EngineeringsPixeldarts

🐬 The future of MySQL is Postgres 🐘RTylerCroy

A Call to Action for Generative AI in 2024Results

How to convert PDF to text with Nanonetsnaman860154

Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar

SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh

#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Enhancing Worker Digital Experience: A Hands-on Workshop for PartnersThousandEyes

Maximizing Board Effectiveness 2024 Webinar.pptxOnBoard

Histor y of HAM Radio presentation slidevu2urc

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Google AI Hackathon: LLM based Evaluator for RAGSujit Pal

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...HostedbyConfluent

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

Contenu connexe

Dernier

🐬 The future of MySQL is Postgres 🐘RTylerCroy

A Call to Action for Generative AI in 2024Results

How to convert PDF to text with Nanonetsnaman860154

Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar

SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh

#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia

Enhancing Worker Digital Experience: A Hands-on Workshop for PartnersThousandEyes

Maximizing Board Effectiveness 2024 Webinar.pptxOnBoard

Histor y of HAM Radio presentation slidevu2urc

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Google AI Hackathon: LLM based Evaluator for RAGSujit Pal

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...HostedbyConfluent

Dernier (20)

🐬 The future of MySQL is Postgres 🐘

A Call to Action for Generative AI in 2024

How to convert PDF to text with Nanonets

Transcript: #StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

My Hashitalk Indonesia April 2024 Presentation

SQL Database Design For Developers at php[tek] 2024

08448380779 Call Girls In Civil Lines Women Seeking Men

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhi

#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024

Unblocking The Main Thread Solving ANRs and Frozen Frames

Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...

Enhancing Worker Digital Experience: A Hands-on Workshop for Partners

Maximizing Board Effectiveness 2024 Webinar.pptx

Histor y of HAM Radio presentation slide

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure service

Google AI Hackathon: LLM based Evaluator for RAG

Boost PC performance: How more available memory can improve productivity

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Transforming Data Streams with Kafka Connect: An Introduction to Single Messa...

En vedette

How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow

AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork

Skeleton Culture CodeSkeleton Technologies

PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley

Content Methodology: A Best Practices Report (Webinar)contently

How to Prepare For a Successful Job Search for 2024Albert Qian

Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)

Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal

5 Public speaking tips from TED - Visualized summarySpeakerHub

ChatGPT and the Future of Work - Clark Boyd Clark Boyd

Getting into the tech field. what next Tessa Mero

Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray

How to have difficult conversations Rajiv Jayarajah, MAppComm, ACC

Introduction to Data ScienceChristy Abraham Joy

Time Management & Productivity - Best PracticesVit Horky

The six step guide to practical project managementMindGenius

Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...RachelPearson36

Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Applitools

12 Ways to Increase Your Influence at WorkGetSmarter

ChatGPT webinar slidesAlireza Esmikhani

En vedette (20)

How Race, Age and Gender Shape Attitudes Towards Mental Health

AI Trends in Creative Operations 2024 by Artwork Flow.pdf

Skeleton Culture Code

PEPSICO Presentation to CAGNY Conference Feb 2024

Content Methodology: A Best Practices Report (Webinar)

How to Prepare For a Successful Job Search for 2024

Social Media Marketing Trends 2024 // The Global Indie Insights

Trends In Paid Search: Navigating The Digital Landscape In 2024

5 Public speaking tips from TED - Visualized summary

ChatGPT and the Future of Work - Clark Boyd

Getting into the tech field. what next

Google's Just Not That Into You: Understanding Core Updates & Search Intent

How to have difficult conversations

Introduction to Data Science

Time Management & Productivity - Best Practices

The six step guide to practical project management

Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...

Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...

12 Ways to Increase Your Influence at Work

ChatGPT webinar slides

Cross Domain Access Policy solution using Cross Origin Resource sharing

4. Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

5. Same Origin Policy It’s actually an important rule. You wouldn’t want to have this happen:

10.

11.

12.

13.

14.

15.

16. JSONEN JavaScript Object Notation Except Not **Formerly JSONP

17.

18.

19.

20.

21.

22.

23.

24.

25. CORS - HOW?

26.

27.

28.

29.

30.

31. Window.name HI! I’m Jerry the Window!

32.

33.

34.

35.

36.

37.

38.

39.

40.

41.

42.

43.

44. What about cookies in Safari? If we post to an iframe it will thank us by sending cookies http://anantgarg.com/2010/02/18/cross-domain-cookies-in-safari/

45.

46.

47.