Re: CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin.

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.datemas.de!rt.uk.eu.org!aioe.org!.POSTED!not-for-mail
From	Richard Maher <maher_rjSPAMLESS@hotmail.com>
Newsgroups	comp.lang.javascript, microsoft.public.dotnet.languages.csharp
Subject	Re: CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin.
Date	Fri, 30 Aug 2013 18:16:27 +0800
Organization	Aioe.org NNTP Server
Lines	130
Message-ID	<kvprds$dnf$1@speranza.aioe.org> (permalink)
References	<kv51rn$ci4$1@speranza.aioe.org> <1eb679e4-18c9-4f8c-8ddd-27090ce789ba@googlegroups.com>
NNTP-Posting-Host	jOhPn0KFjrxwuMc9OPMmCw.user.speranza.aioe.org
Mime-Version	1.0
Content-Type	text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding	7bit
X-Complaints-To	abuse@aioe.org
User-Agent	Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
X-Notice	Filtered by postfilter v. 0.8.2
Xref	csiph.com comp.lang.javascript:21114

Cross-posted to 2 groups.

Show key headers only | View raw

On 8/24/2013 6:45 AM, Michael Haufe (TNO) wrote:
8<
> Here is a resource that may help:
>
> <https://developer.mozilla.org/en-US/docs/HTTP/Access_control_CORS>
>
> Check your headers
>

Hi Michael,

(Sorry for the delay in responding. Thanks for the useful reference BTW)

The headers, at least to me, look peachy. See below.

What am I doing wrong? It looks like the instructions from my web.config 
AND individual method BOTH effected the headers. Sounds good right?

Cheers Richard Maher


HEADERS>>>


Request URL:

http://1.2.3.4/JSON/LoadCustomerAndDisplay/LibraryJson

2.       Request Method:

GET

3.       Status Code:

200 OK

4.       Request Headersview source

1.       Accept:

*/*

2.       Accept-Encoding:

gzip,deflate,sdch

3.       Accept-Language:

en-US,en;q=0.8

4.       Connection:

keep-alive

5.       DNT:

1

6.       Host:

1.2.3.4

7.       Referer:

http://1.2.3.4/Labstats.html

8.       User-Agent:

Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like 
Gecko) Chrome/29.0.1547.57 Safari/537.36

5.       Response Headersview source

1.       Access-Control-Allow-Headers:

Content-Type

2.       Access-Control-Allow-Methods:

GET, POST, PUT, DELETE, OPTIONS

3.       Access-Control-Allow-Origin:

*

4.       Access-Control-Allow-Origin:

*

5.       Cache-Control:

private

6.       Content-Encoding:

gzip

7.       Content-Length:

655

8.       Content-Type:

text/html; charset=utf-8

9.       Date:

Fri, 30 Aug 2013 08:36:21 GMT

10.    Server:

Microsoft-IIS/7.5

11.    Vary:

Accept-Encoding

12.    X-AspNet-Version:

4.0.30319

13.    X-AspNetMvc-Version:

2.0

14.    X-Powered-By:

ASP.NET

Thread

CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin. Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-08-22 20:57 +0800
  Re: CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin. "Michael Haufe (TNO)" <tno@thenewobjective.com> - 2013-08-23 15:45 -0700
    Re: CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin. Richard Maher <maher_rjSPAMLESS@hotmail.com> - 2013-08-30 18:16 +0800
    Re: CORS with .NET debugger - XMLHttpRequest cannot load Origin X is not allowed by Access-Control-Allow-Origin. Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-08-31 11:24 +0200

csiph-web