Mobile app version of vmapp.org
Login or Join
Margaret670

: Read-only cross origin domain request Is it possible to allow read-only access in a CORS header? I want JS from two websites to be capable of verifying each other, but not altering each other.

@Margaret670

Posted in: #Domains #Javascript #Security #Xss

Is it possible to allow read-only access in a CORS header? I want JS from two websites to be capable of verifying each other, but not altering each other.

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Margaret670

2 Comments

Sorted by latest first Latest Oldest Best

 

@Becky754

The answer to this is no, there is no way to make resources on a page read-only to JavaScript loaded from another domain.

10% popularity Vote Up Vote Down


 

@Annie201

I'm not quite sure what you mean by read-only in this case, because it does depend on the web application using the HTTP-methods/verbs correctly, but this might help:

Access-Control-Allow-Methods: GET

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme