Web API-使用CORS保护GET不受锚标记的影响

Question

i have created a GET web api method that is going to be referred to from an anchor tag outside of my application (one of our vendors).

i was thinking this would not work out of the box because of CORS but I guess this only happens when making calls via javascript / ajax ???

what would be a good solution to ensure this method is only called by certain domains (including our site)?

Answer 1

refer this link it should give you the information you are looking

Checkout the section Set the Allowed Origins

Answer 2

  [EnableCors(origins: "http://example.com, http://example1.com", headers: "*", methods: "*")]
   public class Controller1 : ApiController
   {
    ...
   }

Put this attribute above your controller class Replace http://example.com and http://example1.com with domains you want to allow