Settings cookie cross domain

[Willi Langer]

Hi all,
I have a few questions:

1- in a web page, if I include a javascript hosted on a remote server,
can it set a cookie in my domain?

i.e.
WWW.MYSITE.COM
<script src="http://www.externalsite.com/my.js">….

Can it set a cookie having domain mysite.com?

2. can a javascript set a cookie in a domain different of the one who
hosted it?

Thanks in advance and sorry for my english.
W.

[Thomas 'PointedEars' Lahn]

Willi Langer wrote:

> 1- in a web page, if I include a javascript hosted on a remote server,
> can it set a cookie in my domain?
>
> i.e.
> WWW.MYSITE.COM
> <script src="http://www.externalsite.com/my.js">….

The proper TLD for examples is `example', not `com', because a `com' domain
might be used. See RFC 2606.

> Can it set a cookie having domain mysite.com?

Yes. Just try it (in many browsers) and you will see.

> 2. can a javascript set a cookie in a domain different of the one who
> hosted it?

Yes, if the other domain belongs to the same sub-level domain.

> Thanks in advance and sorry for my english.

There is also a German-speaking newsgroup on this subject,
de.comp.lang.javascript, where your questions will be as welcome. See also
<http://dcljs.de/>.


PointedEars
--
realism: HTML 4.01 Strict
evangelism: XHTML 1.0 Strict
madness: XHTML 1.1 as application/xhtml+xml
-- Bjoern Hoehrmann