4 ms·
> and cannot run on the same domain as `widget.com` since it also contains user generated content. Why not host at usercontent.widget.com? You can pass credent
by andrethegiant 6y ago
> and cannot run on the same domain as `widget.com` since it also contains user generated content.
Why not host at usercontent.widget.com? You can pass credentials via a frame postMessage, are protected by same-origin policy, and cookies would be considered first-party