HTML 5 Storage's same origin policy

Question

I've tried with Firefox 4.0 to use the localStorage object to save a few values used to fill the form at http://host1.example.com/index.html and to fetch those values to automatically fill the same form at http://host2.example.com/index.html but it doesn't work.

Does the same origin policy applies to the url instead of the domain?

robertc · Answer 1 · 2011-07-11T22:57:45.497

6

No, it applies to hosts. You could try setting document.domain before you create or retrieve your localStorage objects:

document.domain = "example.com";

--edit

OK, though you can set document.domain that has no impact on localStorage. It is possible to hack together a solution using iframe and cross document messaging: Cross-domain localStorage

edited Jul 11 '11 at 22:57

answered Jul 11 '11 at 13:35

robertc

74,533
18
193
177

you can't change the document.domain – Nathan Bubna Jul 11 '11 at 21:59
Oh, sorry. I didn't realize you could drop subdomains. Thanks for teaching me something new! – Nathan Bubna Jul 13 '11 at 15:46

score 2 · Answer 2 · answered Jul 11 '11 at 22:00

2

you're out of luck. localStorage cannot be shared between different domains.

answered Jul 11 '11 at 22:00

Nathan Bubna

6,823
2
35
36

score 0 · Answer 3 · answered Jan 22 '13 at 16:20

0

So for example I could set localStorage data at dev.blah.com, and retrieve it from prod.blah.com, as long as I set the document.domain = "blah.com"; ?

answered Jan 22 '13 at 16:20

AuntieChrist

67
1
2

score 0 · Answer 4 · answered May 22 '15 at 08:00

0

You can't use localStorage or sessionStorage cross the domains or sub-domains just with the original API. You can use some libraries to help sending message between different domains.

answered May 22 '15 at 08:00

David Tao

513
5
12

HTML 5 Storage's same origin policy

4 Answers4

Linked