在Mobile Safari中禁用同源策略

Question

I have an HTML5/JavaScript app that was originally written to run in certain cars. Basically, I need to set up my app to run in the browser for a simple demo to a customer.

I'm using jQuery .ajax which is causing problems due to the Same Origin Policy. I have found plenty of ways to disable this in desktop browsers, but not mobile ones.

My goal is to demo the app on an iPad in Mobile Safari. Is there any way to temporarily disable the Same Origin Policy on an iPad?

Answer 1

I had the same problem with a sencha app. I resolved by setting a base path to my javascript ajax calls, example:

var BASEPATH = 'http://192.168.1.200/myapp';

$.ajax({
  url: BASEPATH+'/someaction'
});

And from the mobile I access it with http://192.168.1.200/myapp

My problem was that the from mobile I get access only with IP but ajax call were point to localhost.

Hope this trick helps.

Answer 2

您需要运行Web服务器，而不是文件协议。

Answer 3

Basically, you need a header.

Put this code at the top of the page you want to send cross domain requests to.

<?php header("Access-Control-Allow-Origin: *"); ?>

Be careful with the *, as this allows any website to send requests to the page from which that header is sent from.

The * can be replaced with domains, such as example.com, example.net.

Answer 4

It can be possible in Javascript if you use an ajax call to a public proxy which basically removes the same origin header. Or you could write a php curl get page where you make the call to using ajax. For code on this check this blogpost:

http://thewebtimes.tumblr.com/post/90549614884/access-forbidden-webpages-with-javascript

Answer 5

Try to use JSONP in your ajax call. It will bypass the Same Origin Policy.

http://learn.jquery.com/ajax/working-with-jsonp/