ie9下ajax拒绝访问,带有CORS的IE9 jQuery AJAX返回“访问被拒绝”

The problem is that IE9 and below do not support CORS. XDomainRequest do only support GET/POST and the text/plain conten-type as described here: http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-workarounds.aspx

So if you want to use all HTTP verbs and/or json etc you have to use another solution. I've written a proxy which will gracefully downgrade to proxying if IE9 or less is used. You do not have to change your code at all if you are using ASP.NET.

The solution is in two parts. The first one is a jquery script which hooks into the jQuery ajax processing. It will automatically call the webserver if an crossDomain request is made and the browser is IE:

$.ajaxPrefilter(function (options, originalOptions, jqXhr) {

if (!window.CorsProxyUrl) {

window.CorsProxyUrl = '/corsproxy/';

}

// only proxy those requests

// that are marked as crossDomain requests.

if (!options.crossDomain) {

return;

}

if (getIeVersion() && getIeVersion() < 10) {

var url = options.url;

options.beforeSend = function (request) {

request.setRequestHeader("X-CorsProxy-Url", url);

};

options.url = window.CorsProxyUrl;

options.crossDomain = false;

}

});

In your web server you have to receive the request, get the value from the X-CorsProxy-Url http header and do a HTTP request and finally return the result.