CODEWITHSUNDEEP
htmlsslcross-domaincache-manifesthtml5-appcache
seb
seb

Reputation: 435

HTML5 application cache - SSL and cross domain - any workaround?

from http://appcachefacts.info/:

Over SSL, all resources in the manifest must respect the same-origin policy. The exception is Google Chrome, which doesn't follow the specification in this regard. Over SSL, Chrome will load resources from different origins so long as they are still served over SSL.

I would really like to load static assets like images,css and javascripts from a CDN close to the user and avoid serving them from my webserver just because i use HTTPS

Is there any way we can work arround those security limitations ?

my goal:

Main html loaded from : https://mydomain.com.

Assets loaded from : https://cdn.mydomain.com (subdomain but not same origin..)

Appcache file I use at the moment, but does not seem to work on safari and iOS iphone : 

CACHE MANIFEST


CACHE:
https://cdn.mydomain.com/main.css
https://cdn.mydomain.com/main.zepto.js

NETWORK:
/
*

Upvotes: 1

Views: 4303

Answers (1)

Branden S. Smith
Branden S. Smith

Reputation: 1161

Unfortunately no, Sorry actually according to http://en.wikipedia.org/wiki/Same_origin_policy currently the only browser that allows for Cross-Domain caching is Chrome and that is only because they are willfully not adhering to the same origin policy. If you want to make your offline site exclusively for chrome users you can do dual servers, otherwise you'll have to stick with one until the different browsers come up with a new policy.

If you want to get tricky you could attempt something like running a jQuery to a html file on your asset server that loads the manifest there, but I doubt that will work during offline use.

Upvotes: 5

Related Questions