node.js - Cloud 9 ide 中的跨源 Node js

Question

我在一个工作区中有一个客户端，在另一个工作区中有一个服务器端。

我在服务器工作区中有跨源。

res.header('Access-Conrol-Allow-Origin', '*');
res.header('Access-Control-Allow-Methods', 'POST, GET, PUT, DELETE, OPTIONS');
res.header('Access-Control-Allow-Credentials', true);
res.header('Access-Control-Max-Age', '86400');
res.header('Access-Control-Allow-Headers', 'X-Requested-With, X-HTTP-Method-Override, Content-Type, Accept');

但是从客户端调用时出现以下错误

Mixed Content: The page at 'https://blogclient-vignesh55.c9users.io/?_c9_id=livepreview1&_c9_host=https://ide.c9.io#/home' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://10.237.69.147:15871/cgi-bin/blockpage.cgi?ws-session=18446744072714596624'. This request has been blocked; the content must be served over HTTPS

Answer 1

您的问题不是同源策略，而是您的页面混合了 http 和 https 调用。确保使用与协议(protocol)无关的 URL，例如 //someurl.com，或者在整个项目中仅使用一种协议(protocol)。

PS:如果您确实阅读了错误消息，它会准确地告诉您:

the content must be served over HTTPS

并且您尝试通过http调用它:

http://xx.xx.xx.xx:15871/cgi-bin/blockpage.cgi?ws-session=XXX