Method and apparatus for secure cross-site scripting

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code,
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
• cause, at least in part, reception of an initiation request from at least a first inline frame of at least one web page, the initiation request specifying a developer identifier associated with a domain of the at least one web page;
• determine a callback resource identifier based on the developer identifier;
• and
• determine to cause, at least in part, transmission of the callback resource identifier to the at least the first inline frame for use in creation of at least a second inline frame associated with the at least the first inline frame.

A method comprising:

• causing, at least in part, creation of an inline frame within a web page of a first domain associated with a developer identifier, wherein the inline frame is associated with a second domain;
• determining to cause, at least in part, transmission of the developer identifier to a platform associated with the second domain;
• causing, at least in part, reception at the inline frame of a callback resource identifier from the platform, wherein the callback resource identifier is determined based, at least in part, on the developer identifier;
• and
• causing, at least in part, creation of another inline frame within the inline frame, wherein the other inline frame is based, at least in part, on the callback resource identifier.

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code,
• the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
• cause, at least in part, creation of an inline frame within a web page of a first domain associated with a developer identifier, wherein the inline frame is associated with a second domain;
• determine to cause, at least in part, transmission of the developer identifier to a platform associated with the second domain;
• cause, at least in part, reception at the inline frame of a callback resource identifier from the platform, wherein the callback resource identifier is determined based, at least in part, on the developer identifier;
• and
• cause, at least in part, creation of another inline frame within the inline frame, wherein the other inline frame is based, at least in part, on the callback resource identifier.