HTML 5 Storage's same origin policy

2019-05-04 07:05发布

问题:

I've tried with Firefox 4.0 to use the localStorage object to save a few values used to fill the form at http://host1.example.com/index.html and to fetch those values to automatically fill the same form at http://host2.example.com/index.html but it doesn't work.

Does the same origin policy applies to the url instead of the domain?

回答1:

No, it applies to hosts. You could try setting document.domain before you create or retrieve your localStorage objects:

document.domain = "example.com";

--edit

OK, though you can set document.domain that has no impact on localStorage. It is possible to hack together a solution using iframe and cross document messaging: Cross-domain localStorage



回答2:

you're out of luck. localStorage cannot be shared between different domains.



回答3:

So for example I could set localStorage data at dev.blah.com, and retrieve it from prod.blah.com, as long as I set the document.domain = "blah.com"; ?



回答4:

You can't use localStorage or sessionStorage cross the domains or sub-domains just with the original API. You can use some libraries to help sending message between different domains.