Hacker News new | ask | show | jobs
by dsl 3340 days ago
Never co-host real applications and user controlled sites on the same root domain. You're just asking for a neverending stream of problems. (This is why everything ends up on googleusercontent.com and friends instead of google.com)
1 comments

Can you go into more detail why? I'm curious.
It can lead to security issues with cookie sharing and domain validation.

My example would have been better as <uuid>.canoncam.com