开发者

X-Domain Cookies in iFrames

开发者 https://www.devze.com 2023-01-02 05:01 出处:网络
I have a domain A.com which is my website. I want to allow the user to login and then I have embedded an iframe into domain B.com which attempts to grab the cookie from A.com to allow the user to be c

I have a domain A.com which is my website. I want to allow the user to login and then I have embedded an iframe into domain B.com which attempts to grab the cookie from A.com to allow the user to be continued to be signed in.

I can't seem to get this working in I开发者_C百科E ? A new session gets set instead and the cookie is never retrieved.

I have set a P3P policy ? Any ideas what I am doing wrong.


B.com is not going to be able to access cookies from A.com. I think you are confusing third-party cookies with cross-domain cookies. With a third-party cookie (which P3P is relevant to), B's content (e.g. http://b.com/foo.png) is included on http://a.com and sets its own cookie. That doesn't allow A or B to read each other's cookies though.

If you want A and B to communicate on the client side, you can use hacks like fragment id messaging, or developing functionality like postMessage

0

精彩评论

暂无评论...
验证码 换一张
取 消