'cross domain security'에 해당되는 글 1건

cross domain security의 한계를 극복하는 방안, 한쪽 일부에서는 끊임없이 그 방법을 연구중인가보다. 얼마 전에 이 이슈에 대한 글을 번역해서 블로그에 포스팅 했었다.
혹시나 이 문제로 많은 어려움을 겪는 이와 나의 궁금증 해결을 위해 일단 (하기는 싫지만) 긁어오기 포스팅을 하겠다. (출처 : Ajaxian.com)


Cross domain JavaScript via DNS

Alex Pooley has written up his thoughts on cross domain JavaScript via DNS. Alex builds on the document.domain fun:

The Problem
From a naive perspective, it is not possible for a web page from domain D, to access a URL from another domain E due to security considerations. Several workarounds have been developed, namely the remote script technique. All existing workarounds suffer from significant limitations, such as the unhampered ability to read and write between two different domains.

The Short
Say domain D wants to connect to domain E. In a nutshell, the trick is to use DNS to point a sub-domain of D, D_s, to E’s server. In doing so, D_s takes on the characteristics of E, while also being accessible to D.


Posted by