小编Der*_*LAU的帖子

使用谷歌浏览器的xmlHttpRequest时拒绝设置不安全的标题"Origin"

收到此错误消息: Refused to set unsafe header "Origin"

使用此代码:

   function getResponse() {
            document.getElementById("_receivedMsgLabel").innerHTML += "getResponse() called.<br/>";
            if (receiveReq.readyState == 4 || receiveReq.readyState == 0) {
                receiveReq.open("GET", "http://L45723:1802", true, "server", "server123");  //must use L45723:1802 at work.
                receiveReq.onreadystatechange = handleReceiveMessage;
                receiveReq.setRequestHeader("Origin", "http://localhost/");
                receiveReq.setRequestHeader("Access-Control-Request-Origin", "http://localhost");
                receiveReq.timeout = 0;
                var currentDate = new Date();
                var sendMessage = JSON.stringify({
                    SendTimestamp: currentDate,
                    Message: "Message 1",
                    Browser: navigator.appName
                });
                receiveReq.send(sendMessage);

            }
        }
Run Code Online (Sandbox Code Playgroud)

我究竟做错了什么?标题中我缺少什么使这个CORS请求有效?

我尝试删除了receiveReq.setRequestHeader("Origin", ...)通话,但谷歌Chrome在我的receiveReq.open()通话中抛出了访问错误...

为什么?

ajax comet xmlhttprequest cors

16
推荐指数
2
解决办法
6万
查看次数

标签 统计

ajax ×1

comet ×1

cors ×1

xmlhttprequest ×1