I am setting the cookie from a local HTML file as below using cookie.js library

$.cookies.set("Demo","Dummy Data");

From another domain I am trying to get the cookie value using below code

alert($.cookies.get("Demo")); 

But it is returning me null.
Please help me on this

I am setting the cookie from a local HTML file as below using cookie.js library

$.cookies.set("Demo","Dummy Data");

From another domain I am trying to get the cookie value using below code

alert($.cookies.get("Demo")); 

But it is returning me null.
Please help me on this

• javascript
• jquery
• cookies

• 3 Maybe I don't understand what you are doing... but you can't get cookie values from other domains - cookies are sandboxed for security. – Matt H Commented Dec 8, 2011 at 16:03

5 Answers 5

This is by design. You can only get the value of a cookie which was set on the current domain.

What you are asking for is not possible due to the security measures built in to web browsers.

The best alternative is to make a JSONP AJAX request which can cross domains.

You can not read a cookie set by another domain.

Take a look at this thread about cross-domain cookies: Cross domain cookies

Basically, this is a security feature. If domain.com set a cookies, domain1.com should not have any access to it, otherwise you could get authentication tokens and other stuff for any website.

Unfortunately, it is returning null because cookies from another domain are not accessible. This is a security feature.

Consider, for example, your session cookie for some website. If I could access that cookie via JS on another domain, then my malicious website (that I trick you into visiting), can then take that session information and give it to some hacker. Then it becomes much more likely that the hacker can hijack your session. All too commonly, there are not other measures in place to make sure that the session used is used by the same person, so all a blackhat needs is the ID and voila - total access as you to the website. Say you're logged into your bank on one window, and then have my hacked evil webiste open in the other... now I might be able to access your bank account. Whoops!

So - it's not possible, and for good reason!

Indeed, this is not possible because of SOP (Same Origin Policy).

You can solve this problem with cross domain methods like: postMessage, JSONP, xmlHttpRequest or iframe to name a few.

However, you have to be concerned about security issues. This podcast explain how to breack cross domain barrier. The posts below also have solutions for your problem.

Stackoverflow Posts

1. How do I set cookies from outside domains inside iframes in Safari?;
2. Resizing an iframe based on content;