cross site xmlhttprequest with cors

Cross-site XMLHttpRequest (XHR) aka CORS or "Why am I getting a http OPTION for a GET/POST request?"

like this

• localhost - - [05/Oct/2011 16:52:10] code 501, message Unsupported method ('OPTIONS')
• localhost - - [05/Oct/2011 16:52:10] "OPTIONS / HTTP/1.1" 501 -

problem

If you're using HTTPRequest to make requests to a server and receive strange OPTION requests and no answers in the client despite your server receiving the messages ok, maybe your problem is that some new browsers [firefox >3] have a security policy to drop all xmlhttprequest (used in AJAX class) for unauthorized clients.

solution

The solution is simple. change response headers to allow communication with your client.

using web.py, here is an example of server that works: https://gist.github.com/1271118

using Flask, there is an example in the Git repository (examples/misc/flaskexamples/flaskcors), and check out the documentation pyjamaswithpocoo.

read more here

• http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
• http://stackoverflow.com/questions/3595515/xmlhttprequest-error-origin-null-is-not-allowed-by-access-control-allow-origin