{"id":4743,"date":"2020-02-07T15:41:02","date_gmt":"2020-02-07T07:41:02","guid":{"rendered":"https:\/\/www.xttblog.com\/?p=4743"},"modified":"2020-02-07T15:41:02","modified_gmt":"2020-02-07T07:41:02","slug":"has-been-blocked-by-cors-policy-response-to-preflight-request-doesnt-pass","status":"publish","type":"post","link":"https:\/\/www.xttblog.com\/?p=4743","title":{"rendered":"has been blocked by CORS policy: Response to preflight request doesn&#8217;t pass"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">has been blocked by CORS policy: Response to preflight request doesn&#8217;t pass access control check: It does not have HTTP ok status.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8de8\u57df\u95ee\u9898\u662f\u4e00\u4e2a\u7531\u6765\u5df2\u4e45\u7684\u95ee\u9898\uff0c\u53ea\u8981\u662f\u4e2a\u7a0b\u5e8f\u5458\uff0c\u6211\u76f8\u4fe1\u4ed6\u65e9\u665a\u4f1a\u9047\u5230\u8fd9\u4e2a\u95ee\u9898\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u8fd1\u6211\u5728\u8fdc\u7a0b\u4e0a\u73ed\uff0c\u5728\u5bb6\u652f\u6491\u5ba2\u6237\uff0c\u5728\u5bb6\u5199 bug\u3002\u7fa4\u91cc\u6709\u4eba\u9047\u5230\u4e86\u8de8\u57df CORS \u95ee\u9898\uff0c\u6211\u627e\u5230\u4e86\u4e00\u7bc7\u5f88\u597d\u7684\u8de8\u57df\u6587\u7ae0\uff0c\u63a8\u8350\u7ed9\u5927\u5bb6\uff01<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CORS\u662f\u4e00\u4e2aW3C\u6807\u51c6\uff0c\u5168\u79f0\u662f&#8221;\u8de8\u57df\u8d44\u6e90\u5171\u4eab&#8221;\uff08Cross-origin resource sharing\uff09\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5b83\u5141\u8bb8\u6d4f\u89c8\u5668\u5411\u8de8\u6e90\u670d\u52a1\u5668\uff0c\u53d1\u51fa<a href=\"http:\/\/www.ruanyifeng.com\/blog\/2012\/09\/xmlhttprequest_level_2.html\" target=\"_blank\" rel=\"noreferrer noopener\"><code>XMLHttpRequest<\/code><\/a>\u8bf7\u6c42\uff0c\u4ece\u800c\u514b\u670d\u4e86AJAX\u53ea\u80fd<a href=\"http:\/\/www.ruanyifeng.com\/blog\/2016\/04\/same-origin-policy.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u540c\u6e90<\/a>\u4f7f\u7528\u7684\u9650\u5236\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u672c\u6587\u8be6\u7ec6\u4ecb\u7ecdCORS\u7684\u5185\u90e8\u673a\u5236\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"http:\/\/www.ruanyifeng.com\/blogimg\/asset\/2016\/bg2016041202.jpg\" alt=\"\" \/><figcaption>\u963f\u8054\u914b\u827e\u56e0\uff08Al Ain\uff09\u7684\u7eff\u6d32\u516c\u56ed<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e00\u3001\u7b80\u4ecb<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CORS\u9700\u8981\u6d4f\u89c8\u5668\u548c\u670d\u52a1\u5668\u540c\u65f6\u652f\u6301\u3002\u76ee\u524d\uff0c\u6240\u6709\u6d4f\u89c8\u5668\u90fd\u652f\u6301\u8be5\u529f\u80fd\uff0cIE\u6d4f\u89c8\u5668\u4e0d\u80fd\u4f4e\u4e8eIE10\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6574\u4e2aCORS\u901a\u4fe1\u8fc7\u7a0b\uff0c\u90fd\u662f\u6d4f\u89c8\u5668\u81ea\u52a8\u5b8c\u6210\uff0c\u4e0d\u9700\u8981\u7528\u6237\u53c2\u4e0e\u3002\u5bf9\u4e8e\u5f00\u53d1\u8005\u6765\u8bf4\uff0cCORS\u901a\u4fe1\u4e0e\u540c\u6e90\u7684AJAX\u901a\u4fe1\u6ca1\u6709\u5dee\u522b\uff0c\u4ee3\u7801\u5b8c\u5168\u4e00\u6837\u3002\u6d4f\u89c8\u5668\u4e00\u65e6\u53d1\u73b0AJAX\u8bf7\u6c42\u8de8\u6e90\uff0c\u5c31\u4f1a\u81ea\u52a8\u6dfb\u52a0\u4e00\u4e9b\u9644\u52a0\u7684\u5934\u4fe1\u606f\uff0c\u6709\u65f6\u8fd8\u4f1a\u591a\u51fa\u4e00\u6b21\u9644\u52a0\u7684\u8bf7\u6c42\uff0c\u4f46\u7528\u6237\u4e0d\u4f1a\u6709\u611f\u89c9\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u56e0\u6b64\uff0c\u5b9e\u73b0CORS\u901a\u4fe1\u7684\u5173\u952e\u662f\u670d\u52a1\u5668\u3002\u53ea\u8981\u670d\u52a1\u5668\u5b9e\u73b0\u4e86CORS\u63a5\u53e3\uff0c\u5c31\u53ef\u4ee5\u8de8\u6e90\u901a\u4fe1\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e8c\u3001\u4e24\u79cd\u8bf7\u6c42<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u6d4f\u89c8\u5668\u5c06CORS\u8bf7\u6c42\u5206\u6210\u4e24\u7c7b\uff1a\u7b80\u5355\u8bf7\u6c42\uff08simple request\uff09\u548c\u975e\u7b80\u5355\u8bf7\u6c42\uff08not-so-simple request\uff09\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ea\u8981\u540c\u65f6\u6ee1\u8db3\u4ee5\u4e0b\u4e24\u5927\u6761\u4ef6\uff0c\u5c31\u5c5e\u4e8e\u7b80\u5355\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uff081) \u8bf7\u6c42\u65b9\u6cd5\u662f\u4ee5\u4e0b\u4e09\u79cd\u65b9\u6cd5\u4e4b\u4e00\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>HEAD<\/li><li>GET<\/li><li>POST<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\uff082\uff09HTTP\u7684\u5934\u4fe1\u606f\u4e0d\u8d85\u51fa\u4ee5\u4e0b\u51e0\u79cd\u5b57\u6bb5\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Accept<\/li><li>Accept-Language<\/li><li>Content-Language<\/li><li>Last-Event-ID<\/li><li>Content-Type\uff1a\u53ea\u9650\u4e8e\u4e09\u4e2a\u503c<code>application\/x-www-form-urlencoded<\/code>\u3001<code>multipart\/form-data<\/code>\u3001<code>text\/plain<\/code><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u51e1\u662f\u4e0d\u540c\u65f6\u6ee1\u8db3\u4e0a\u9762\u4e24\u4e2a\u6761\u4ef6\uff0c\u5c31\u5c5e\u4e8e\u975e\u7b80\u5355\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6d4f\u89c8\u5668\u5bf9\u8fd9\u4e24\u79cd\u8bf7\u6c42\u7684\u5904\u7406\uff0c\u662f\u4e0d\u4e00\u6837\u7684\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e09\u3001\u7b80\u5355\u8bf7\u6c42<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">3.1 \u57fa\u672c\u6d41\u7a0b<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bf9\u4e8e\u7b80\u5355\u8bf7\u6c42\uff0c\u6d4f\u89c8\u5668\u76f4\u63a5\u53d1\u51faCORS\u8bf7\u6c42\u3002\u5177\u4f53\u6765\u8bf4\uff0c\u5c31\u662f\u5728\u5934\u4fe1\u606f\u4e4b\u4e2d\uff0c\u589e\u52a0\u4e00\u4e2a<code>Origin<\/code>\u5b57\u6bb5\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u9762\u662f\u4e00\u4e2a\u4f8b\u5b50\uff0c\u6d4f\u89c8\u5668\u53d1\u73b0\u8fd9\u6b21\u8de8\u6e90AJAX\u8bf7\u6c42\u662f\u7b80\u5355\u8bf7\u6c42\uff0c\u5c31\u81ea\u52a8\u5728\u5934\u4fe1\u606f\u4e4b\u4e2d\uff0c\u6dfb\u52a0\u4e00\u4e2a<code>Origin<\/code>\u5b57\u6bb5\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>GET \/cors HTTP\/1.1\nOrigin: http:\/\/api.bob.com\nHost: api.alice.com\nAccept-Language: en-US\nConnection: keep-alive\nUser-Agent: Mozilla\/5.0...<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u7684\u5934\u4fe1\u606f\u4e2d\uff0c<code>Origin<\/code>\u5b57\u6bb5\u7528\u6765\u8bf4\u660e\uff0c\u672c\u6b21\u8bf7\u6c42\u6765\u81ea\u54ea\u4e2a\u6e90\uff08\u534f\u8bae + \u57df\u540d + \u7aef\u53e3\uff09\u3002\u670d\u52a1\u5668\u6839\u636e\u8fd9\u4e2a\u503c\uff0c\u51b3\u5b9a\u662f\u5426\u540c\u610f\u8fd9\u6b21\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c<code>Origin<\/code>\u6307\u5b9a\u7684\u6e90\uff0c\u4e0d\u5728\u8bb8\u53ef\u8303\u56f4\u5185\uff0c\u670d\u52a1\u5668\u4f1a\u8fd4\u56de\u4e00\u4e2a\u6b63\u5e38\u7684HTTP\u56de\u5e94\u3002\u6d4f\u89c8\u5668\u53d1\u73b0\uff0c\u8fd9\u4e2a\u56de\u5e94\u7684\u5934\u4fe1\u606f\u6ca1\u6709\u5305\u542b<code>Access-Control-Allow-Origin<\/code>\u5b57\u6bb5\uff08\u8be6\u89c1\u4e0b\u6587\uff09\uff0c\u5c31\u77e5\u9053\u51fa\u9519\u4e86\uff0c\u4ece\u800c\u629b\u51fa\u4e00\u4e2a\u9519\u8bef\uff0c\u88ab<code>XMLHttpRequest<\/code>\u7684<code>onerror<\/code>\u56de\u8c03\u51fd\u6570\u6355\u83b7\u3002\u6ce8\u610f\uff0c\u8fd9\u79cd\u9519\u8bef\u65e0\u6cd5\u901a\u8fc7\u72b6\u6001\u7801\u8bc6\u522b\uff0c\u56e0\u4e3aHTTP\u56de\u5e94\u7684\u72b6\u6001\u7801\u6709\u53ef\u80fd\u662f200\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c<code>Origin<\/code>\u6307\u5b9a\u7684\u57df\u540d\u5728\u8bb8\u53ef\u8303\u56f4\u5185\uff0c\u670d\u52a1\u5668\u8fd4\u56de\u7684\u54cd\u5e94\uff0c\u4f1a\u591a\u51fa\u51e0\u4e2a\u5934\u4fe1\u606f\u5b57\u6bb5\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access-Control-Allow-Origin: http:\/\/api.bob.com\nAccess-Control-Allow-Credentials: true\nAccess-Control-Expose-Headers: FooBar\nContent-Type: text\/html; charset=utf-8<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u7684\u5934\u4fe1\u606f\u4e4b\u4e2d\uff0c\u6709\u4e09\u4e2a\u4e0eCORS\u8bf7\u6c42\u76f8\u5173\u7684\u5b57\u6bb5\uff0c\u90fd\u4ee5<code>Access-Control-<\/code>\u5f00\u5934\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff081\uff09Access-Control-Allow-Origin<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u662f\u5fc5\u987b\u7684\u3002\u5b83\u7684\u503c\u8981\u4e48\u662f\u8bf7\u6c42\u65f6<code>Origin<\/code>\u5b57\u6bb5\u7684\u503c\uff0c\u8981\u4e48\u662f\u4e00\u4e2a<code>*<\/code>\uff0c\u8868\u793a\u63a5\u53d7\u4efb\u610f\u57df\u540d\u7684\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff082\uff09Access-Control-Allow-Credentials<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u53ef\u9009\u3002\u5b83\u7684\u503c\u662f\u4e00\u4e2a\u5e03\u5c14\u503c\uff0c\u8868\u793a\u662f\u5426\u5141\u8bb8\u53d1\u9001Cookie\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cCookie\u4e0d\u5305\u62ec\u5728CORS\u8bf7\u6c42\u4e4b\u4e2d\u3002\u8bbe\u4e3a<code>true<\/code>\uff0c\u5373\u8868\u793a\u670d\u52a1\u5668\u660e\u786e\u8bb8\u53ef\uff0cCookie\u53ef\u4ee5\u5305\u542b\u5728\u8bf7\u6c42\u4e2d\uff0c\u4e00\u8d77\u53d1\u7ed9\u670d\u52a1\u5668\u3002\u8fd9\u4e2a\u503c\u4e5f\u53ea\u80fd\u8bbe\u4e3a<code>true<\/code>\uff0c\u5982\u679c\u670d\u52a1\u5668\u4e0d\u8981\u6d4f\u89c8\u5668\u53d1\u9001Cookie\uff0c\u5220\u9664\u8be5\u5b57\u6bb5\u5373\u53ef\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff083\uff09Access-Control-Expose-Headers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u53ef\u9009\u3002CORS\u8bf7\u6c42\u65f6\uff0c<code>XMLHttpRequest<\/code>\u5bf9\u8c61\u7684<code>getResponseHeader()<\/code>\u65b9\u6cd5\u53ea\u80fd\u62ff\u52306\u4e2a\u57fa\u672c\u5b57\u6bb5\uff1a<code>Cache-Control<\/code>\u3001<code>Content-Language<\/code>\u3001<code>Content-Type<\/code>\u3001<code>Expires<\/code>\u3001<code>Last-Modified<\/code>\u3001<code>Pragma<\/code>\u3002\u5982\u679c\u60f3\u62ff\u5230\u5176\u4ed6\u5b57\u6bb5\uff0c\u5c31\u5fc5\u987b\u5728<code>Access-Control-Expose-Headers<\/code>\u91cc\u9762\u6307\u5b9a\u3002\u4e0a\u9762\u7684\u4f8b\u5b50\u6307\u5b9a\uff0c<code>getResponseHeader('FooBar')<\/code>\u53ef\u4ee5\u8fd4\u56de<code>FooBar<\/code>\u5b57\u6bb5\u7684\u503c\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3.2 withCredentials \u5c5e\u6027<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u8bf4\u5230\uff0cCORS\u8bf7\u6c42\u9ed8\u8ba4\u4e0d\u53d1\u9001Cookie\u548cHTTP\u8ba4\u8bc1\u4fe1\u606f\u3002\u5982\u679c\u8981\u628aCookie\u53d1\u5230\u670d\u52a1\u5668\uff0c\u4e00\u65b9\u9762\u8981\u670d\u52a1\u5668\u540c\u610f\uff0c\u6307\u5b9a<code>Access-Control-Allow-Credentials<\/code>\u5b57\u6bb5\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access-Control-Allow-Credentials: true<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u53e6\u4e00\u65b9\u9762\uff0c\u5f00\u53d1\u8005\u5fc5\u987b\u5728AJAX\u8bf7\u6c42\u4e2d\u6253\u5f00<code>withCredentials<\/code>\u5c5e\u6027\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>var xhr = new XMLHttpRequest();\nxhr.withCredentials = true;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5426\u5219\uff0c\u5373\u4f7f\u670d\u52a1\u5668\u540c\u610f\u53d1\u9001Cookie\uff0c\u6d4f\u89c8\u5668\u4e5f\u4e0d\u4f1a\u53d1\u9001\u3002\u6216\u8005\uff0c\u670d\u52a1\u5668\u8981\u6c42\u8bbe\u7f6eCookie\uff0c\u6d4f\u89c8\u5668\u4e5f\u4e0d\u4f1a\u5904\u7406\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f46\u662f\uff0c\u5982\u679c\u7701\u7565<code>withCredentials<\/code>\u8bbe\u7f6e\uff0c\u6709\u7684\u6d4f\u89c8\u5668\u8fd8\u662f\u4f1a\u4e00\u8d77\u53d1\u9001Cookie\u3002\u8fd9\u65f6\uff0c\u53ef\u4ee5\u663e\u5f0f\u5173\u95ed<code>withCredentials<\/code>\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>xhr.withCredentials = false;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u9700\u8981\u6ce8\u610f\u7684\u662f\uff0c\u5982\u679c\u8981\u53d1\u9001Cookie\uff0c<code>Access-Control-Allow-Origin<\/code>\u5c31\u4e0d\u80fd\u8bbe\u4e3a\u661f\u53f7\uff0c\u5fc5\u987b\u6307\u5b9a\u660e\u786e\u7684\u3001\u4e0e\u8bf7\u6c42\u7f51\u9875\u4e00\u81f4\u7684\u57df\u540d\u3002\u540c\u65f6\uff0cCookie\u4f9d\u7136\u9075\u5faa\u540c\u6e90\u653f\u7b56\uff0c\u53ea\u6709\u7528\u670d\u52a1\u5668\u57df\u540d\u8bbe\u7f6e\u7684Cookie\u624d\u4f1a\u4e0a\u4f20\uff0c\u5176\u4ed6\u57df\u540d\u7684Cookie\u5e76\u4e0d\u4f1a\u4e0a\u4f20\uff0c\u4e14\uff08\u8de8\u6e90\uff09\u539f\u7f51\u9875\u4ee3\u7801\u4e2d\u7684<code>document.cookie<\/code>\u4e5f\u65e0\u6cd5\u8bfb\u53d6\u670d\u52a1\u5668\u57df\u540d\u4e0b\u7684Cookie\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u56db\u3001\u975e\u7b80\u5355\u8bf7\u6c42<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">4.1 \u9884\u68c0\u8bf7\u6c42<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u975e\u7b80\u5355\u8bf7\u6c42\u662f\u90a3\u79cd\u5bf9\u670d\u52a1\u5668\u6709\u7279\u6b8a\u8981\u6c42\u7684\u8bf7\u6c42\uff0c\u6bd4\u5982\u8bf7\u6c42\u65b9\u6cd5\u662f<code>PUT<\/code>\u6216<code>DELETE<\/code>\uff0c\u6216\u8005<code>Content-Type<\/code>\u5b57\u6bb5\u7684\u7c7b\u578b\u662f<code>application\/json<\/code>\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u975e\u7b80\u5355\u8bf7\u6c42\u7684CORS\u8bf7\u6c42\uff0c\u4f1a\u5728\u6b63\u5f0f\u901a\u4fe1\u4e4b\u524d\uff0c\u589e\u52a0\u4e00\u6b21HTTP\u67e5\u8be2\u8bf7\u6c42\uff0c\u79f0\u4e3a&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\uff08preflight\uff09\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6d4f\u89c8\u5668\u5148\u8be2\u95ee\u670d\u52a1\u5668\uff0c\u5f53\u524d\u7f51\u9875\u6240\u5728\u7684\u57df\u540d\u662f\u5426\u5728\u670d\u52a1\u5668\u7684\u8bb8\u53ef\u540d\u5355\u4e4b\u4e2d\uff0c\u4ee5\u53ca\u53ef\u4ee5\u4f7f\u7528\u54ea\u4e9bHTTP\u52a8\u8bcd\u548c\u5934\u4fe1\u606f\u5b57\u6bb5\u3002\u53ea\u6709\u5f97\u5230\u80af\u5b9a\u7b54\u590d\uff0c\u6d4f\u89c8\u5668\u624d\u4f1a\u53d1\u51fa\u6b63\u5f0f\u7684<code>XMLHttpRequest<\/code>\u8bf7\u6c42\uff0c\u5426\u5219\u5c31\u62a5\u9519\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u9762\u662f\u4e00\u6bb5\u6d4f\u89c8\u5668\u7684JavaScript\u811a\u672c\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>var url = 'http:\/\/api.alice.com\/cors';\nvar xhr = new XMLHttpRequest();\nxhr.open('PUT', url, true);\nxhr.setRequestHeader('X-Custom-Header', 'value');\nxhr.send();<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u4ee3\u7801\u4e2d\uff0cHTTP\u8bf7\u6c42\u7684\u65b9\u6cd5\u662f<code>PUT<\/code>\uff0c\u5e76\u4e14\u53d1\u9001\u4e00\u4e2a\u81ea\u5b9a\u4e49\u5934\u4fe1\u606f<code>X-Custom-Header<\/code>\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6d4f\u89c8\u5668\u53d1\u73b0\uff0c\u8fd9\u662f\u4e00\u4e2a\u975e\u7b80\u5355\u8bf7\u6c42\uff0c\u5c31\u81ea\u52a8\u53d1\u51fa\u4e00\u4e2a&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\uff0c\u8981\u6c42\u670d\u52a1\u5668\u786e\u8ba4\u53ef\u4ee5\u8fd9\u6837\u8bf7\u6c42\u3002\u4e0b\u9762\u662f\u8fd9\u4e2a&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\u7684HTTP\u5934\u4fe1\u606f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>OPTIONS \/cors HTTP\/1.1\nOrigin: http:\/\/api.bob.com\nAccess-Control-Request-Method: PUT\nAccess-Control-Request-Headers: X-Custom-Header\nHost: api.alice.com\nAccept-Language: en-US\nConnection: keep-alive\nUser-Agent: Mozilla\/5.0...<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;\u9884\u68c0&#8221;\u8bf7\u6c42\u7528\u7684\u8bf7\u6c42\u65b9\u6cd5\u662f<code>OPTIONS<\/code>\uff0c\u8868\u793a\u8fd9\u4e2a\u8bf7\u6c42\u662f\u7528\u6765\u8be2\u95ee\u7684\u3002\u5934\u4fe1\u606f\u91cc\u9762\uff0c\u5173\u952e\u5b57\u6bb5\u662f<code>Origin<\/code>\uff0c\u8868\u793a\u8bf7\u6c42\u6765\u81ea\u54ea\u4e2a\u6e90\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u9664\u4e86<code>Origin<\/code>\u5b57\u6bb5\uff0c&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\u7684\u5934\u4fe1\u606f\u5305\u62ec\u4e24\u4e2a\u7279\u6b8a\u5b57\u6bb5\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff081\uff09Access-Control-Request-Method<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u662f\u5fc5\u987b\u7684\uff0c\u7528\u6765\u5217\u51fa\u6d4f\u89c8\u5668\u7684CORS\u8bf7\u6c42\u4f1a\u7528\u5230\u54ea\u4e9bHTTP\u65b9\u6cd5\uff0c\u4e0a\u4f8b\u662f<code>PUT<\/code>\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff082\uff09Access-Control-Request-Headers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u662f\u4e00\u4e2a\u9017\u53f7\u5206\u9694\u7684\u5b57\u7b26\u4e32\uff0c\u6307\u5b9a\u6d4f\u89c8\u5668CORS\u8bf7\u6c42\u4f1a\u989d\u5916\u53d1\u9001\u7684\u5934\u4fe1\u606f\u5b57\u6bb5\uff0c\u4e0a\u4f8b\u662f<code>X-Custom-Header<\/code>\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4.2 \u9884\u68c0\u8bf7\u6c42\u7684\u56de\u5e94<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u670d\u52a1\u5668\u6536\u5230&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\u4ee5\u540e\uff0c\u68c0\u67e5\u4e86<code>Origin<\/code>\u3001<code>Access-Control-Request-Method<\/code>\u548c<code>Access-Control-Request-Headers<\/code>\u5b57\u6bb5\u4ee5\u540e\uff0c\u786e\u8ba4\u5141\u8bb8\u8de8\u6e90\u8bf7\u6c42\uff0c\u5c31\u53ef\u4ee5\u505a\u51fa\u56de\u5e94\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>HTTP\/1.1 200 OK\nDate: Mon, 01 Dec 2008 01:15:39 GMT\nServer: Apache\/2.0.61 (Unix)\nAccess-Control-Allow-Origin: http:\/\/api.bob.com\nAccess-Control-Allow-Methods: GET, POST, PUT\nAccess-Control-Allow-Headers: X-Custom-Header\nContent-Type: text\/html; charset=utf-8\nContent-Encoding: gzip\nContent-Length: 0\nKeep-Alive: timeout=2, max=100\nConnection: Keep-Alive\nContent-Type: text\/plain<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u7684HTTP\u56de\u5e94\u4e2d\uff0c\u5173\u952e\u7684\u662f<code>Access-Control-Allow-Origin<\/code>\u5b57\u6bb5\uff0c\u8868\u793a<code>http:\/\/api.bob.com<\/code>\u53ef\u4ee5\u8bf7\u6c42\u6570\u636e\u3002\u8be5\u5b57\u6bb5\u4e5f\u53ef\u4ee5\u8bbe\u4e3a\u661f\u53f7\uff0c\u8868\u793a\u540c\u610f\u4efb\u610f\u8de8\u6e90\u8bf7\u6c42\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access-Control-Allow-Origin: *<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u6d4f\u89c8\u5668\u5426\u5b9a\u4e86&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\uff0c\u4f1a\u8fd4\u56de\u4e00\u4e2a\u6b63\u5e38\u7684HTTP\u56de\u5e94\uff0c\u4f46\u662f\u6ca1\u6709\u4efb\u4f55CORS\u76f8\u5173\u7684\u5934\u4fe1\u606f\u5b57\u6bb5\u3002\u8fd9\u65f6\uff0c\u6d4f\u89c8\u5668\u5c31\u4f1a\u8ba4\u5b9a\uff0c\u670d\u52a1\u5668\u4e0d\u540c\u610f\u9884\u68c0\u8bf7\u6c42\uff0c\u56e0\u6b64\u89e6\u53d1\u4e00\u4e2a\u9519\u8bef\uff0c\u88ab<code>XMLHttpRequest<\/code>\u5bf9\u8c61\u7684<code>onerror<\/code>\u56de\u8c03\u51fd\u6570\u6355\u83b7\u3002\u63a7\u5236\u53f0\u4f1a\u6253\u5370\u51fa\u5982\u4e0b\u7684\u62a5\u9519\u4fe1\u606f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>XMLHttpRequest cannot load http:\/\/api.alice.com.\nOrigin http:\/\/api.bob.com is not allowed by Access-Control-Allow-Origin.<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u670d\u52a1\u5668\u56de\u5e94\u7684\u5176\u4ed6CORS\u76f8\u5173\u5b57\u6bb5\u5982\u4e0b\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access-Control-Allow-Methods: GET, POST, PUT\nAccess-Control-Allow-Headers: X-Custom-Header\nAccess-Control-Allow-Credentials: true\nAccess-Control-Max-Age: 1728000<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff081\uff09Access-Control-Allow-Methods<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u5fc5\u9700\uff0c\u5b83\u7684\u503c\u662f\u9017\u53f7\u5206\u9694\u7684\u4e00\u4e2a\u5b57\u7b26\u4e32\uff0c\u8868\u660e\u670d\u52a1\u5668\u652f\u6301\u7684\u6240\u6709\u8de8\u57df\u8bf7\u6c42\u7684\u65b9\u6cd5\u3002\u6ce8\u610f\uff0c\u8fd4\u56de\u7684\u662f\u6240\u6709\u652f\u6301\u7684\u65b9\u6cd5\uff0c\u800c\u4e0d\u5355\u662f\u6d4f\u89c8\u5668\u8bf7\u6c42\u7684\u90a3\u4e2a\u65b9\u6cd5\u3002\u8fd9\u662f\u4e3a\u4e86\u907f\u514d\u591a\u6b21&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff082\uff09Access-Control-Allow-Headers<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u6d4f\u89c8\u5668\u8bf7\u6c42\u5305\u62ec<code>Access-Control-Request-Headers<\/code>\u5b57\u6bb5\uff0c\u5219<code>Access-Control-Allow-Headers<\/code>\u5b57\u6bb5\u662f\u5fc5\u9700\u7684\u3002\u5b83\u4e5f\u662f\u4e00\u4e2a\u9017\u53f7\u5206\u9694\u7684\u5b57\u7b26\u4e32\uff0c\u8868\u660e\u670d\u52a1\u5668\u652f\u6301\u7684\u6240\u6709\u5934\u4fe1\u606f\u5b57\u6bb5\uff0c\u4e0d\u9650\u4e8e\u6d4f\u89c8\u5668\u5728&#8221;\u9884\u68c0&#8221;\u4e2d\u8bf7\u6c42\u7684\u5b57\u6bb5\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff083\uff09Access-Control-Allow-Credentials<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u4e0e\u7b80\u5355\u8bf7\u6c42\u65f6\u7684\u542b\u4e49\u76f8\u540c\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\uff084\uff09Access-Control-Max-Age<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8be5\u5b57\u6bb5\u53ef\u9009\uff0c\u7528\u6765\u6307\u5b9a\u672c\u6b21\u9884\u68c0\u8bf7\u6c42\u7684\u6709\u6548\u671f\uff0c\u5355\u4f4d\u4e3a\u79d2\u3002\u4e0a\u9762\u7ed3\u679c\u4e2d\uff0c\u6709\u6548\u671f\u662f20\u5929\uff081728000\u79d2\uff09\uff0c\u5373\u5141\u8bb8\u7f13\u5b58\u8be5\u6761\u56de\u5e941728000\u79d2\uff08\u537320\u5929\uff09\uff0c\u5728\u6b64\u671f\u95f4\uff0c\u4e0d\u7528\u53d1\u51fa\u53e6\u4e00\u6761\u9884\u68c0\u8bf7\u6c42\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4.3 \u6d4f\u89c8\u5668\u7684\u6b63\u5e38\u8bf7\u6c42\u548c\u56de\u5e94<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u65e6\u670d\u52a1\u5668\u901a\u8fc7\u4e86&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\uff0c\u4ee5\u540e\u6bcf\u6b21\u6d4f\u89c8\u5668\u6b63\u5e38\u7684CORS\u8bf7\u6c42\uff0c\u5c31\u90fd\u8ddf\u7b80\u5355\u8bf7\u6c42\u4e00\u6837\uff0c\u4f1a\u6709\u4e00\u4e2a<code>Origin<\/code>\u5934\u4fe1\u606f\u5b57\u6bb5\u3002\u670d\u52a1\u5668\u7684\u56de\u5e94\uff0c\u4e5f\u90fd\u4f1a\u6709\u4e00\u4e2a<code>Access-Control-Allow-Origin<\/code>\u5934\u4fe1\u606f\u5b57\u6bb5\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u9762\u662f&#8221;\u9884\u68c0&#8221;\u8bf7\u6c42\u4e4b\u540e\uff0c\u6d4f\u89c8\u5668\u7684\u6b63\u5e38CORS\u8bf7\u6c42\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PUT \/cors HTTP\/1.1\nOrigin: http:\/\/api.bob.com\nHost: api.alice.com\nX-Custom-Header: value\nAccept-Language: en-US\nConnection: keep-alive\nUser-Agent: Mozilla\/5.0...<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u5934\u4fe1\u606f\u7684<code>Origin<\/code>\u5b57\u6bb5\u662f\u6d4f\u89c8\u5668\u81ea\u52a8\u6dfb\u52a0\u7684\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0b\u9762\u662f\u670d\u52a1\u5668\u6b63\u5e38\u7684\u56de\u5e94\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access-Control-Allow-Origin: http:\/\/api.bob.com\nContent-Type: text\/html; charset=utf-8<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0a\u9762\u5934\u4fe1\u606f\u4e2d\uff0c<code>Access-Control-Allow-Origin<\/code>\u5b57\u6bb5\u662f\u6bcf\u6b21\u56de\u5e94\u90fd\u5fc5\u5b9a\u5305\u542b\u7684\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u4e94\u3001\u4e0eJSONP\u7684\u6bd4\u8f83<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CORS\u4e0eJSONP\u7684\u4f7f\u7528\u76ee\u7684\u76f8\u540c\uff0c\u4f46\u662f\u6bd4JSONP\u66f4\u5f3a\u5927\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">JSONP\u53ea\u652f\u6301<code>GET<\/code>\u8bf7\u6c42\uff0cCORS\u652f\u6301\u6240\u6709\u7c7b\u578b\u7684HTTP\u8bf7\u6c42\u3002JSONP\u7684\u4f18\u52bf\u5728\u4e8e\u652f\u6301\u8001\u5f0f\u6d4f\u89c8\u5668\uff0c\u4ee5\u53ca\u53ef\u4ee5\u5411\u4e0d\u652f\u6301CORS\u7684\u7f51\u7ad9\u8bf7\u6c42\u6570\u636e\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u539f\u6587\uff1a\u300a<a rel=\"noreferrer noopener\" aria-label=\"\u8de8\u57df\u8d44\u6e90\u5171\u4eab CORS \u8be6\u89e3\uff08\u5728\u65b0\u7a97\u53e3\u6253\u5f00\uff09\" href=\"https:\/\/www.ruanyifeng.com\/blog\/2016\/04\/cors.html\" target=\"_blank\">\u8de8\u57df\u8d44\u6e90\u5171\u4eab CORS \u8be6\u89e3<\/a>\u300b<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53c2\u8003\u8d44\u6599<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a rel=\"noreferrer noopener\" aria-label=\"Cross-Origin Resource Sharing (CORS)\uff08\u5728\u65b0\u7a97\u53e3\u6253\u5f00\uff09\" href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/CORS\" target=\"_blank\">Cross-Origin Resource Sharing (CORS)<\/a><\/li><li><a rel=\"noreferrer noopener\" aria-label=\"HTTP\u8bbf\u95ee\u63a7\u5236\uff08CORS\uff09\uff08\u5728\u65b0\u7a97\u53e3\u6253\u5f00\uff09\" href=\"https:\/\/developer.mozilla.org\/zh-CN\/docs\/Web\/HTTP\/Access_control_CORS\" target=\"_blank\">HTTP\u8bbf\u95ee\u63a7\u5236\uff08CORS\uff09<\/a><\/li><li><a href=\"https:\/\/www.html5rocks.com\/en\/tutorials\/cors\/\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Using CORS\uff08\u5728\u65b0\u7a97\u53e3\u6253\u5f00\uff09\">Using CORS<\/a><\/li><\/ul>\n<!-- <audio autoplay=\"autoplay\" height=\"100\" width=\"100\" hidden=\"true\"><source src=\"https:\/\/c.coka.la\/orAvPR.mp3\" type=\"audio\/mp3\"\/><\/audio><img decoding=\"async\" src=\"https:\/\/images.weserv.nl\/?url=https:\/\/ws3.sinaimg.cn\/large\/8fa5dcfcgy1g4em3rzar5j20ib089ae0.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/> --><p><!-- <img decoding=\"async\" src=\"https:\/\/raw.githubusercontent.com\/xmt1139057136\/xttblog\/master\/8fa5dcfcgy1g4em3rzar5j20ib089ae0.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/>--><img decoding=\"async\" src=\"https:\/\/saas.51autoparts.cn\/api\/admin\/sys-file\/oss\/file?fileName=84db51f8561e448f9a4fda2eff0811f9.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/><\/p><p>\u6700\u540e\uff0c\u6b22\u8fce\u5173\u6ce8\u6211\u7684\u4e2a\u4eba\u5fae\u4fe1\u516c\u4f17\u53f7\uff1a\u4e1a\u4f59\u8349\uff08yyucao\uff09\uff01<b>\u53ef\u52a0\u4f5c\u8005\u5fae\u4fe1\u53f7\uff1a<font color=\"red\">xttblog2<\/font>\u3002\u5907\u6ce8\uff1a\u201c1\u201d\uff0c\u6dfb\u52a0\u535a\u4e3b\u5fae\u4fe1\u62c9\u4f60\u8fdb\u5fae\u4fe1\u7fa4\u3002\u5907\u6ce8\u9519\u8bef\u4e0d\u4f1a\u540c\u610f\u597d\u53cb\u7533\u8bf7\u3002<\/b>\u518d\u6b21\u611f\u8c22\u60a8\u7684\u5173\u6ce8\uff01\u540e\u7eed\u6709\u7cbe\u5f69\u5185\u5bb9\u4f1a\u7b2c\u4e00\u65f6\u95f4\u53d1\u7ed9\u60a8\uff01\u539f\u521b\u6587\u7ae0\u6295\u7a3f\u8bf7\u53d1\u9001\u81f3532009913@qq.com\u90ae\u7bb1\u3002\u5546\u52a1\u5408\u4f5c\u4e5f\u53ef\u6dfb\u52a0\u4f5c\u8005\u5fae\u4fe1\u8fdb\u884c\u8054\u7cfb\uff01<\/p><p>\u672c\u6587\u539f\u6587\u51fa\u5904\uff1a<a href=\"https:\/\/www.xttblog.com\">\u4e1a\u4f59\u8349<\/a>\uff1a &raquo; <a href=\"https:\/\/www.xttblog.com\/?p=4743\">has been blocked by CORS policy: Response to preflight request doesn&#8217;t pass<\/a><\/p><!-- <div class=\"bd-reward-stl\"><button id=\"bdRewardBtn\"><span><\/span><\/button><\/div> -->","protected":false},"excerpt":{"rendered":"<p>has been blocked by CORS policy: Response to preflight  [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[2073,1601,2072,2074,2075],"class_list":["post-4743","post","type-post","status-publish","format-standard","hentry","category-html5","tag-cors","tag-crossorigin","tag-jsonp","tag-xmlhttprequest","tag-2075"],"_links":{"self":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/4743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4743"}],"version-history":[{"count":1,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/4743\/revisions"}],"predecessor-version":[{"id":4744,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/4743\/revisions\/4744"}],"wp:attachment":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}