#dev 2026-04-18

2026-04-18 UTC
grufwub, thegreekgeek__, doesnm_, ZodiacalComet, vidak, blacklight, k3can, barnaby, coolham, runawaydevil, [me1850], ttybitnik, srazkvt, anon1, proofreed, ax562, NaomiAmethyst, [KevinMarks] and Maker joined the channel
#
[capjamesg] Are there any security pitfalls with running an application on two domains at once?
#
[capjamesg] I have a feature request for my feed reader to work with custom domains.
#
aaronpk That's how stream.indieweb.org works. It's actually served by monocle.p3k.io
#
[capjamesg] Oooh that’s good to know!
#
[capjamesg] The way I have built it is that all public pages are deactivated unless the hostname matches the main instance.
#
[snarfed] yup. I think the short answer is no, it doesn't add fundamentally new or different security concerns, but it is obviously more effort to make everything work ok. eg cookie-based auth will only work on the domain where the cookie was initially set, etc
#
[capjamesg] That’s good to know.
#
[capjamesg] I am using flask-session for auth.
#
[capjamesg] Thanks for your help everyone! aaronpk++
#
Loqi aaronpk has 29 karma in this channel over the last year (109 in all channels)
#
[capjamesg] [snarfed]++
#
Loqi [snarfed] has 38 karma in this channel over the last year (50 in all channels)
ggarcia24, ZodiacalComet, troojg, vriska, rrix, WinnerWi-, [fnhipster], [Murray] and gRegor joined the channel