HTML5 cross-domain request Access-control-allow-origin

Cors Protocol:

Classification of 1.COR requests:

1. A simple COR request, which sends a request directly to a cross-domain resource, contains a simple header and method. The header information returned contains access-control-allow-origin: Www.helloword.com. Represents cross-domain access for www.helloword.com domain names.

2. Complex Cor contains complex methods and headers, which require a pre-request to be sent before a real request can be sent

2. Meaning of the reply request header information

1.access-control-allow-origin:http://haha.com. Represents a domain name that allows cross-domain * to represent all domain names across domains

2.access-control-max-age:60, the delegate does not need to send a pre-request within 60 seconds to cache the result

3.access-control-allow-methods:get,put represents allow GET, and put requests cross-domain

4.access-control-allow-headers:content-type representative allows cross-domain requests to carry context-type information ()

HTML5 cross-domain request Access-control-allow-origin