3 ms·
> replace the contents of the page to look like an iCloud login form while remaining inside the apple.com domain Indeed, and with the history.pushState() API,
by ronsor 5y ago
> replace the contents of the page to look like an iCloud login form while remaining inside the apple.com domain
Indeed, and with the history.pushState() API, you can even change the URL to be more realistic.
- benkaiser 5y agoYou would still be scoped to the same domain (found.apple.com).
- iudqnolq 5y agoWould you really be suspicious of found.apple.com/login? Many companies have login flows through subdomains. Google redirects their main login flows through YouTube for some reason.
- pests 5y agoMy guess? The Google login system got complicated when they tried to merge your YouTube and Google account for G+ back in the day. YouTube probably has some say in the authorization or permissions for YT original accounts.