The browser intercepts the cross-origin request processing method-Firefox reports an error. The same-origin policy cannot read remote resources on xxx.

CORS can be used for cross-origin requests with different domain names.

1) place the following files in the requested project root directory (Root ):

Crossdomain. xml

1. [HTML]View plaincopyprint?
   1. <? XML version = "1.0"?>
   2. <! Doctype cross-domain-policy system "./cross-domain-policy.dtd">
   3. <Cross-domain-Policy> <site-control permitted-Cross-Domain-policies = "all"/>
   4. <Allow-access-from domain = "*"/>
   5. <Allow-http-request-headers-from domain = "*" headers = "*"/>
   6. </Cross-Domain-Policy>

Cross-domain-policy.dtd

  [HTML]View plaincopyprint?

1. <? XML version = "1.0" encoding = "ISO-8859-1"?>
2. <! -- Adobe DTD for Cross-Domain Policy files -->
3. <! -- Copyright (c) 2008-2009, Adobe Systems Inc. -->
5. <! Element Cross-Domain-Policy (site-control ?, Allow-access-from *, allow-http-request-headers-from *, allow-access-from-identity *)>
7. <! Element site-control empty>
8. <! ATTLIST site-control permitted-Cross-Domain-policies (all | by-Content-Type | by-ftp-filename | master-only | none) # required>
10. <! Element allow-access-from empty>
11. <! ATTLIST allow-access-from domain CDATA # required>
12. <! ATTLIST allow-access-from to-ports CDATA # implied>
13. <! ATTLIST allow-access-from secure (true | false) "true">
15. <! Element allow-http-request-headers-from empty>
16. <! ATTLIST allow-http-request-headers-from domain CDATA # required>
17. <! ATTLIST allow-http-request-headers-FROM headers CDATA # required>
18. <! ATTLIST allow-http-request-headers-from secure (true | false) "true">
20. <! Element allow-access-from-Identity (signatory)>
22. <! Element signatory (certificate)>
24. <! Element certificate empty>
25. <! ATTLIST certificate fingerprint CDATA # required>
26. <! ATTLIST certificate fingerprint-algorithm CDATA # required>
28. <! -- End of file. -->

Test that the two XML files can be accessed from http: // domain: Port/crossdomain. xml.

2) responseheader must be added to the target to be returned.Access-control-allow-Origin

Response. setheader ("Access-control-allow-Origin","*");

* Can be the domain name of the requester.

Reference: http://blog.csdn.net/hereiskxm/article/details/32093675

 

The browser intercepts the cross-origin request processing method-Firefox reports an error. The same-origin policy cannot read remote resources on xxx.