mORMot and Open Source friends
View Ticket
Not logged in
2013-01-30
10:39 Fixed ticket [5d9669e6b1]: Handle OPTIONS method and cross domain AJAX requests plus 3 other changes artifact: 756eb54033 user: ab
2013-01-22
13:36 New ticket [5d9669e6b1]. artifact: f148a48166 user: ab

Ticket Hash: 5d9669e6b151d3b18bd0d8cb6485b16fc8a8adf6
Title: Handle OPTIONS method and cross domain AJAX requests
Status: Fixed Type: Feature_Request
Severity: Important Priority: Immediate
Subsystem: Resolution: Fixed
Last Modified: 2013-01-30 10:39:26
Version Found In:
Description:
In order to allow cross domain AJAX requests:
  • OPTIONS method shall be implemented;
  • Cross domain URI shall be optionally supplied.

    ab added on 2013-01-30 10:39:26 UTC:
    Implemented by [9d97879a75] - added TSQLHttpServer.AccessControlAllowOrigin property to handle cross-site AJAX requests via cross-origin resource sharing (CORS).

    By default, this property is set to '', so cross-site will be disabled.

    Implementation is not complete: it won't check the "Origin: " incoming header, but it will let AJAX requests work.

    Its sounded better to include it at TSQLHttpServer level, since CORS is a HTTP-dedicated feature.