weixin_33682790 2017-03-15 11:50 采纳率: 0%
浏览 121

多个allow-origin标头

I'm trying to make a simple ajax request, but get an error "XMLHttpRequest cannot load URL. The 'Access-Control-Allow-Origin' header contains multiple values 'http://localhost:52007, *', but only one is allowed. Origin 'http://localhost:52007' is therefore not allowed access."

Request:

    $.ajax({
        type: "GET", 
        url: url,
        dataType: "json",
        success: successFunc,
        error: errorFunc,
        xhrFields: {
            withCredentials: true
        }
    });

As I understand the error occurs because response contains two 'Access-Control-Allow-Origin' headers: one for my machine - 'localhost:52007' and an other one is '*'.

The last one '*' is added automatically by IIS by HTTP Response Headers section(there is a rule to always add Access-Control-Allow-Origin='*'). Unfortunately I can't change that

After I looked on request via Fiddler I saw that it contains Access-Control-Allow-Origin='localhost'. It looks like on the server this header is copied to response and also Access-Control-Allow-Origin='*' is added because of the rule.

So, what can I do in this situation? Can I remove Access-Control-Allow-Origin='localhost' from my request? Or maybe if I change it's value from 'localhost' to '*' it would not be copied to response. But how can I do that?

</div>
  • 写回答

0条回答 默认 最新

    报告相同问题?

    悬赏问题

    • ¥15 基于双目测规则物体尺寸
    • ¥15 wegame打不开英雄联盟
    • ¥15 公司的电脑,win10系统自带远程协助,访问家里个人电脑,提示出现内部错误,各种常规的设置都已经尝试,感觉公司对此功能进行了限制(我们是集团公司)
    • ¥15 救!ENVI5.6深度学习初始化模型报错怎么办?
    • ¥30 eclipse开启服务后,网页无法打开
    • ¥30 雷达辐射源信号参考模型
    • ¥15 html+css+js如何实现这样子的效果?
    • ¥15 STM32单片机自主设计
    • ¥15 如何在node.js中或者java中给wav格式的音频编码成sil格式呢
    • ¥15 不小心不正规的开发公司导致不给我们y码,