d0zingcat/cors-anywhere
1
0
Fork 0
mirror of https://github.com/d0zingcat/cors-anywhere.git synced 2026-05-13 15:09:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Default to https for the CORS API.

Browse Source 
Heroku uses Strict Transport Security (HSTS), which forces that all
requests to *.herokuapp.com must use HSTS. However. Chrome cannot read
the CORS response after a HSTS redirect due to https://crbug.com/387198.

Since the request is going to be redirected to https anyway, the demo
and the documentation will use https by default.
This commit is contained in:
Rob Wu
2014-08-29 19:17:52 +02:00
parent 0745b894c6
commit 4343044781
2 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
README.md
View File

@@ -53,7 +53,7 @@ If you want to automatically enable cross-domain requests when needed, use the f
```javascript ```javascript
(function() { (function() {
var cors_api_host = 'cors-anywhere.herokuapp.com'; var cors_api_host = 'cors-anywhere.herokuapp.com';
var cors_api_url = (window.location.protocol === 'http:' ? 'http://' : 'https://') + cors_api_host + '/'; var cors_api_url = 'https://' + cors_api_host + '/';
var slice = [].slice; var slice = [].slice;
var origin = window.location.protocol + '//' + window.location.host; var origin = window.location.protocol + '//' + window.location.host;
var open = XMLHttpRequest.prototype.open; var open = XMLHttpRequest.prototype.open;
@@ -74,8 +74,7 @@ If you're using jQuery, you can also use the following code **instead of** the p
```javascript ```javascript
jQuery.ajaxPrefilter(function(options) { jQuery.ajaxPrefilter(function(options) {
if (options.crossDomain && jQuery.support.cors) { if (options.crossDomain && jQuery.support.cors) {
options.url = (window.location.protocol === 'http:' ? 'http:' : 'https:') + options.url = 'https://cors-anywhere.herokuapp.com/' + options.url;
'//cors-anywhere.herokuapp.com/' + options.url;
} }
}); });
``` ```

3
demo.html
View File

@@ -64,8 +64,7 @@ textarea {
</div> </div>
<script> <script>
var protocol = location.protocol === 'http:' ? 'http:' : 'https:'; var cors_api_url = 'https://cors-anywhere.herokuapp.com/';
var cors_api_url = protocol + '//cors-anywhere.herokuapp.com/';
function doCORSRequest(options, printResult) { function doCORSRequest(options, printResult) {
var x = new XMLHttpRequest(); var x = new XMLHttpRequest();
x.open(options.method, cors_api_url + options.url); x.open(options.method, cors_api_url + options.url);