Cross domain restrictions and subdomains

cross-domain cross-domain-policy
mcbjam picture mcbjam · May 20, 2013 · Viewed 8.4k times · Source

Is there a cross domain policy restriction for subdomains?

If I have an application on paint.xxxx.com which is manipulating images from image.xxxx.com, are there any cross domain problems?

I'm asking these questions, because I'm considering putting a proxy on a subdomain.

Answer

smugford picture smugford · May 20, 2013

yes the cross domain restriction applies for subdomains.

The solution is to put

document.domain = "example.com" ; // whatever your domain name is

in the top of the js file(s) for both the parent domain and the child domain

Google Document.domain and cross site and there should be a better explanation but I've had the same issue and that is what worked for me.

Related questions

ajax post request is No 'Access-Control-Allow-Origin' header is present on the requested resource.'

I'm just making an ajax post request and I'm getting an error like: XMLHttpRequest cannot load https://xxx.com?redirect_uri=http://www.example.com. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://example.com' is therefore …

Read More
JavaScript access from parent domain to subdomain?

I've read that setting document.domain = "example.com" lets me access the parent domain from a subdomain. Will the same work the other way around? Let's say my main site is running under http://example.com. All API functions that …

Read More
HTML5 video doesn't play with crossOrigin="anonymous"

I am trying to integrate the HTML5 video player in my application. My video sources and the caption (for track tag) are coming from a different domain. When I use the <video crossOrigin="anonymous"> <source src="domain1…

Read More