ajax跨域方法之CORS跨域总结

php端添加

header('Access-Control-Allow-Origin: *');

header('Access-Control-Allow-Headers: content-type');

header('Access-Control-Allow-Methods: POST');

 

nodejs 配置全站路由都允许跨域

var allowCrossDomain = function(req, res, next) {
    res.header('Access-Control-Allow-Origin', '*');
    res.header('Access-Control-Allow-Methods', 'GET,PUT,POST,DELETE');
    res.header('Access-Control-Allow-Headers', 'Content-Type');
    res.header('Access-Control-Allow-Credentials','true');
    next();
};
app.use(allowCrossDomain);

标准的CORS请求不对cookies做任何事情，既不发送也不改变。如果希望改变这一情况，就需要将withCredentials设置为true。

xhr.withCredentials = true