The summary part is taken from a book about p3p privacy policy. The detailed table is from w3.org. the test data is tested by myself. If any omission or error occurs, please confirm.
Related Resources:
1. http://www.w3.org/P3P/
2. http://www.w3.org/TR/2002/REC-P3P-20020416/
Brief description:
In essence,The p3p
Reprinted: http://www.cnblogs.com/_franky/archive/2011/03/16/1985954.html
This section is excerpted from a book about the p3p privacy policy. some detailed tables are from w3.org. the test data is tested by myself. if you have any omissions or errors, please correct them. related Resources: 1. http://www.w3.org/P3P/2. http://www.w3.org/TR/2002/REC-P3P-20020416/
-party website.
In the above demonstration, you can also perform this operation on your local machine. You only need to make the following modifications:
Run the following command notepad C:/Windows/system32/Drivers/etc/hosts to open the hosts file. Make sure that the following two lines are added to the hosts file:
127.0.0.1 a.net 127.0.0.1 B .com
What if I solve this problem?
A very simple solution is to modify the http://a.net/WebApp_P3P/a_setcookie.aspx file and add the following line of
, we use the following methods to create cookies on a third-party website.
In the above demonstration, you can also perform this operation on your local machine. You only need to make the following modifications:
Run the following command notepad C:/Windows/system32/Drivers/etc/hosts to open the hosts file. Make sure that the following two lines are added to the hosts file:
127.0.0.1 a.net127.0.0.1 B .com
What if I solve this problem?
A very simple solution is to modify the http://a.net/WebAp
What is P3P?
P3P (Platform for Privacy Preferences) is a recommended standard for privacy protection published by the public to provide privacy protection for users. The idea of the P3P standard is that the privacy policy of the WEB site should inform visitors about the types of information that the site collects, what information will be provided to whom, how lo
Different from JS Cross-domain, IFrame Cross-domain, and other common processing methods, can also use P3P to achieve cross-domain.What's P3P?P3P (Platform for privacy Preferences) is a privacy protection recommendation published by the Consortium to provide privacy protection for users.
The idea of the P3P standard i
It is necessary to talk about p3p. It seems that when I discussed Netease's cross-origin implementation with my friends, I forgot to make it clear that the p3p header is required and the set-cookie later can be used to succeed.ForIEFor example (under the default security level ),IFRAME, IMG, link, and other labelsBoth send session cookies (also called the First-party cookies) and intercept local cookies (al
In the development, we encountered the Cross-domain main or tangled in IE, the page of the IFRAME or frame or JS cross-domain, IE has security policy restrictions page without cookies, but if we add P3P, there is no limit to this strategy. This is also P3P to break through the feasible premise of Cross-domain, in fact, in Firefox Chorme class browser is not the limit.
First, let's find out what
During development, the cross-domain we encounter is mainly entangled in IE. when IFRAME, FRAME, or JS cross-domain in the page, IE has a security policy to limit that the page does not contain cookies, however, if we add P3P, there is no restriction on this policy. This is also a feasible prerequisite for P3P to break through cross-origin. it is different from common processing methods such as JS Cross-Ori
P3p
P3p is a kind of standard defined by the platform for privary preferences. It can protect your privacy rights, enable Internet attackers to choose whether to collect and use their personal information when accessing the website. If a site does not comply with the p3p standard, then cookies related to it will be automatically rejected, and
P3P
P3P is a kind of standard defined by the Platform for Privary Preferences. It can protect your privacy rights, enable Internet attackers to choose whether to collect and use their personal information when accessing the website. If a site does not comply with the P3P standard, then Cookies related to it will be automatically rejected, and
Use p3p header to solve IFRAME cross-origin access cookie
By update on February 14,200 pm
| Permalink | comments (0) | trackbacks (0) currently encountered the problem that IFRAME could not obtain the cookie (Session) when integrating several applications. After Google, the problem was finally solved, record it now.
This is my requirement.
One application was developed using. net. It mainly controls user logon and user access permissions, and is
PHP uses P3P to implement cross-origin. Unlike common methods such as JS Cross-Origin and IFRAME cross-origin, you can also use P3P to implement cross-origin. What is P3P (PlatformforPrivacyPreferences) is a common solution released by W3C that privacy protection is different from JS Cross-Origin and IFRAME cross-origin. It can also be used to implement cross-ori
During development, the cross-domain we encounter is mainly entangled in IE. When IFRAME, FRAME, or JS cross-domain in the page, IE has a security policy to limit that the page does not contain cookies, however, if we add P3P, there is no such policy.
During development, the cross-domain we encounter is mainly entangled in IE. When IFRAME, FRAME, or JS cross-domain in the page, IE has a security policy to limit that the page does not contain cookies,
In actual work, there are many requirements like this. For example, we have two domain names. We want to automatically complete the login of another domain name after one domain name login, that is, the PASSPORT function.
I only write a rough one. For the convenience of testing, edit the hosts file and add the test domain name (C: WINDOWSsystem32driversetchosts)
127.0.0.1 www.a.com127.0.0.1 www. B .com
First, create the_setcookie.php file with the following content:
// Header (
Welcome to the Linux community forum and interact with 2 million technical staff. Go to php and set the p3p header to solve the cross-origin cookie Access problem: we all know that Cookies cannot be cross-origin, however, you can solve this problem by setting the p3p header. To test, edit the hosts file and add the test domain name (in C: WINDOWSsystem32driversetchos
Welcome to the Linux community forum and
Use p3p header to solve the problem of session loss during IFRAME cross-origin access in IE
When integrating the client's login, or when another website uses IFRAME, especially an HTTP page, when accessing an HTTPS page, the session is often invalid!
The p3p (Platform for privacy preferences Project (p3p) Specification) protocols supported by E6/IE7 prevent t
P3p
P3P is a standard that is called a personal security platform (the Platform for privary Preferences), protects online privacy so that Internet surfers can choose whether to be collected by third parties and use their own personal information when browsing the Web. If a station does not adhere to the P3P standard, then the cookies will be automatically reject
First, I used Redis and P3P technology here. Of course, any nosql can satisfyImpersonate a client that accesses a login.Phpsession_start (); $Get=$_get;if($Get['uname'] =='FTT' $Get['Pass'] =='123') {$token=MD5 (rand ()); $_session['User'] ='FTT'; $_session['IsLogin'] =1; Save_redis ($token, Json_encode ($_session)); Header ('p3p:cp= "CURa ADMa DEVa Psao psdo our BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"'); $file.=''; echo $file;}Else{echo'
When I was doing a Traffic Statistics item recently, I accidentally found that IE had some security restrictions when writing cookies on pages in IFRAME, which led to the failure to read cookies, after finding a solution for a long time, find the following methods:
1. the cookie on the page cannot be the cookie of the browser process (including the verification ticket and the cookie without setting the timeout time), otherwise the cross-domain will not be obtained. this is rarely mentioned by
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.