浏览器拦截跨域请求处理方法-firefox报错，同源策略不允许读取XXX上的远程资源

时间：2014-09-27 22:39:11 阅读：549 评论：0 收藏：0 [点我收藏+]

使用post请求域名不相同的资源的话，可以用cors跨域。

1）在被请求的项目根目录（root下）下放以下文件

crossdomain.xml

[html] view plain copy print ?
1. <?xml version="1.0"?>
2. <!DOCTYPE cross-domain-policy SYSTEM "./cross-domain-policy.dtd">
3. <cross-domain-policy> <site-control permitted-cross-domain-policies="all" />
4. <allow-access-from domain="*" />
5. <allow-http-request-headers-from domain="*" headers="*"/>
6. </cross-domain-policy>

cross-domain-policy.dtd

[html] view plain copy print ?

<?xml version="1.0" encoding="ISO-8859-1"?>
<!ELEMENT cross-domain-policy (site-control?,allow-access-from*,allow-http-request-headers-from*,allow-access-from-identity*)>
<!ELEMENT site-control EMPTY>
<!ATTLIST site-control permitted-cross-domain-policies (all|by-content-type|by-ftp-filename|master-only|none) #REQUIRED>
<!ELEMENT allow-access-from EMPTY>
<!ATTLIST allow-access-from domain CDATA #REQUIRED>
<!ATTLIST allow-access-from to-ports CDATA #IMPLIED>
<!ATTLIST allow-access-from secure (true|false) "true">
<!ELEMENT allow-http-request-headers-from EMPTY>
<!ATTLIST allow-http-request-headers-from domain CDATA #REQUIRED>
<!ATTLIST allow-http-request-headers-from headers CDATA #REQUIRED>
<!ATTLIST allow-http-request-headers-from secure (true|false) "true">
<!ELEMENT allow-access-from-identity (signatory)>
<!ELEMENT signatory (certificate)>
<!ELEMENT certificate EMPTY>
<!ATTLIST certificate fingerprint CDATA #REQUIRED>
<!ATTLIST certificate fingerprint-algorithm CDATA #REQUIRED>

测试从http://domain:port/crossdomain.xml可访问到这两个xml。

2.）被请求的目标在返回时需加Responseheader Access-Control-Allow-Origin

response.setHeader("Access-Control-Allow-Origin", "*");

后面的*可以是请求方的域名。

参考：http://blog.csdn.net/hereiskxm/article/details/32093675

原文：http://www.cnblogs.com/tecliu/p/3997352.html

踩

(0)

评论一句话评论（0）

分享档案

更多>