强制更改AJAX标头

Question

So I am developing a Apache Cordova app for Android, and I'd like to be able to set the headers for the AJAX requests I am sending, including the Host, Origin, and Referer fields. Because these are being executed in a separate WebView, I can't access the user's original cookies or sessions (I'm not being malicious, I promise). But whenever I attempt to send that information, I get a "Refused to set unsafe header Host" error. Is there any way to override this in Apache Cordova?

Answer 1

If you are using jQuery, you can try using the headers option when setting up the call. You can also use the beforeSend option if you need more fine-grained control over the headers.

//set specific accept headers (should work cross browser)
$.ajax({
headers: {
    Accept : "text/plain; charset=utf-8",
    "Content-Type": "text/plain; charset=utf-8"
}
});

//an alternative to the above
$.ajax({
    beforeSend: function(xhrObj)
    {
        xhrObj.setRequestHeader("Content-Type","application/json");
        xhrObj.setRequestHeader("Accept","application/json");
    }
    });

Answer 2

You have to use a plugin that makes the request from native side. This approach will allow you to bypass the web view limitations on making request outside your origin.

You could start using this plugin: https://github.com/wymsee/cordova-HTTP.