关于Chrome的同源政策的困惑：如何摆脱它而不要求用户禁用Chrome中的安全性？

Question

I am confused : I am developping a web app (HTML/CSS/JS) that loads google+ platform api scripts to create a single log on. It works in firefox but not in Chrome because of the "same origin policy" and I get the "Blocked a frame with origin..." errors.

I am not gonna expect the user to start their Chrome with an option like "--disable-web-security"... , do I ? ;-)

So I am confused : How do I get this to work with Chrome ?

For example : if I try to load :

<script type="text/javascript">
        (function() {
            var po = document.createElement('script'); po.type = 'text/javascript'; po.async = true;
            po.src = 'https://apis.google.com/js/client:plusone.js';
            var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(po, s);
        })();
    </script>

I get :

Blocked a frame with origin "https://apis.google.com" from accessing a frame with origin "https://boardlineapp.com". Protocols, domains, and ports must match. 

Answer 1

检查您的域协议是否为https：