Re: jQuery/Ajax cross domain issue and CORS

As you wait for access to WEB400

One workaround I use when I am too lazy to code a callback is to add some header entries like so (in a Java servlet serving JSON)

response.setContentType("application/json");
response.addHeader("X-XSS-Protection", "0");
response.addHeader("Access-Control-Allow-Origin", "*");

You can use whatever implementation you need for the server type you are using.

You can also have Apache handle this if you are using Apache as a reverse proxy.....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
Twitter - Sys_i_Geek IBM_i_Geek

On 2/7/2017 2:56 PM, Keith McCully wrote:

Agreed.

I had just signed up for Web 400 but awaiting acknowledgement

thanks Keith

sent from Android


On 7 Feb 2017 20:52, "David Gibbs" <david@xxxxxxxxxxxx> wrote:

On 2/7/2017 2:48 PM, Keith McCully wrote:

I have a Ajax client forwarding requests to a node.js server running
on the IBM i. However, as expected, I get the "No
Access-Control-Allow-Origin header on the requested resource" error.

This would be more appropriate in the WEB400 list (http://mlists.org/web400
).

david