Simon Willison’s Weblog

Subscribe
Atom feed for crossdomainstorage

1 item tagged “crossdomainstorage”

2008

Session variables without cookies. Brilliant but terrifying hack—you can store up to 2 MB of data in window.name and it persists between multiple pages, even across domains. Doesn’t work with new tabs though, and storing JSON in it and eval()ing it is a bad idea—a malicious site could populate it before sending the user to you.

# 13th May 2008, 9:59 pm / crossdomainstorage, eval, javascript, json, security, sessions