3 ms·
I think you misunderstand CORS. You have to enable CORS on your server, not the sites that use your widget. http://stackoverflow.com/questions/298745/how-do-i-
by aakilfernandes 12y ago
I think you misunderstand CORS. You have to enable CORS on your server, not the sites that use your widget.
http://stackoverflow.com/questions/298745/how-do-i-send-a-cross-domain-post-request-via-javascript/7605119#7605119 http://stackoverflow.com/questions/298745/how-do-i-send-a-cr...
- bgdam 12y agoYeah, I know that. What I meant was that I did not want to set wildcards for the access-control-allow-origin header. If you use hostname reflection like in the linked stackoverflow example, issues arise when the widget is cached browser side by site A and then invoked by site B.