Pita/etherpad-lite — Issue #258: sessionID throw URL
Author: sembrestels
Created: 2011-12-01 23:41:38+00:00
State: open

PHP client class (and I don't know if is the same with the other languages) uses a cookie to mantain the session between the page and the pad. It works perfectly if both are in the same domain, and also can work if pad is on a subdomain, but fails when we try to embed a pad from another domain.

A possible solution would be to pass sessionID thow the URL, as an embed parameter. Remember that in https connections everything is encrypted, also the URL, and there are no security issue in that sense.

Etherpad Lite should accept sessionID throw the cookie and also throw the URL.