mirror of
https://github.com/d0zingcat/cors-anywhere.git
synced 2026-05-13 15:09:25 +00:00
4343044781
Heroku uses Strict Transport Security (HSTS), which forces that all requests to *.herokuapp.com must use HSTS. However. Chrome cannot read the CORS response after a HSTS redirect due to https://crbug.com/387198. Since the request is going to be redirected to https anyway, the demo and the documentation will use https by default.
108 lines
2.6 KiB
HTML
108 lines
2.6 KiB
HTML
<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<title>Demo of CORS Anywhere</title>
|
|
<meta name="viewport" content="width=device-width">
|
|
<style>
|
|
html, body {
|
|
margin: 0;
|
|
height: 100%;
|
|
padding: 3px;
|
|
font-family: Arial, sans-serif;
|
|
font-size: 16px;
|
|
}
|
|
* {
|
|
-moz-box-sizing: border-box;
|
|
box-sizing: border-box;
|
|
}
|
|
label { display: block; }
|
|
input {
|
|
display: block;
|
|
width: 100%;
|
|
padding: 8px 5px;
|
|
border: 1px solid #CCC;
|
|
}
|
|
button {
|
|
display: inline-block;
|
|
width: 49%;
|
|
padding: 8px;
|
|
}
|
|
textarea {
|
|
width: 100%;
|
|
height: 100%;
|
|
}
|
|
#top {
|
|
height: 180px;
|
|
position: relative;
|
|
|
|
}
|
|
#bottom {
|
|
height: 100%;
|
|
margin-top: -180px;
|
|
padding-top: 180px;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div id="top">
|
|
CORS Anywhere demo • <a href="https://github.com/Rob--W/cors-anywhere/">Github</a> • <a href="http://cors-anywhere.herokuapp.com">Live server</a>.
|
|
<label>
|
|
Url to be fetched (example: <a href="//robwu.nl/dump.php">robwu.nl/dump.php</a>)
|
|
<input type="url" id="url" value="">
|
|
</label>
|
|
<label>
|
|
If using POST, enter the data:
|
|
<input type="text" id="data">
|
|
</label>
|
|
<label>
|
|
<button id="get">GET</button><button id="post">POST</button>
|
|
</label>
|
|
</div>
|
|
<div id="bottom">
|
|
<textarea id="output"></textarea>
|
|
</div>
|
|
|
|
<script>
|
|
var cors_api_url = 'https://cors-anywhere.herokuapp.com/';
|
|
function doCORSRequest(options, printResult) {
|
|
var x = new XMLHttpRequest();
|
|
x.open(options.method, cors_api_url + options.url);
|
|
x.onload = x.onerror = function() {
|
|
printResult(
|
|
options.method + ' ' + options.url + '\n' +
|
|
x.status + ' ' + x.statusText + '\n\n' +
|
|
(x.responseText || '')
|
|
);
|
|
};
|
|
if (/^POST/i.test(options.method)) {
|
|
x.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
|
|
}
|
|
x.send(options.data);
|
|
}
|
|
|
|
// Bind event
|
|
(function() {
|
|
var urlField = document.getElementById('url');
|
|
var dataField = document.getElementById('data');
|
|
var outputField = document.getElementById('output');
|
|
document.getElementById('get').onclick =
|
|
document.getElementById('post').onclick = function(e) {
|
|
e.preventDefault();
|
|
doCORSRequest({
|
|
method: this.id === 'post' ? 'POST' : 'GET',
|
|
url: urlField.value,
|
|
data: dataField.value
|
|
}, function printResult(result) {
|
|
outputField.value = result;
|
|
});
|
|
};
|
|
})();
|
|
if (typeof console === 'object') {
|
|
console.log('// To test a local CORS Anywhere server, set cors_api_url. For example:');
|
|
console.log('cors_api_url = "http://localhost:8080/"');
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|