IE not starting a session from iframe?

The task was to bypass the registration form on the remote server using session_id, acquired through the call web server API. So the user will not need to log in twice.

Since there is no way to set cookies for different domains. What we have come to is to place a small file on a remote server with which we pass the encrypted session_id from a hidden iframe and which should start a valid session for the remote application, which is then loaded into another iframe.

This approach works fine in FF / Chrome, but not in IE ... However, if I copy the URL for self remote authorization script from the iframe src attribute to the IE address bar and load it from there, a session get is created as expected. But for some reason, he just doesn't want to do the same from the iframe.

Does anyone know why this is happening?

+3
source share
2 answers

Well, what we did for IE, we just redirect the entire browser to an authorization script, which then redirects it back. At least this somehow solves the problem.

Does anyone have a better solution?

0
source

, , iframe, , iframe.

+1

Source: https://habr.com/ru/post/1740637/


All Articles