Sign In Start Free Trial

CORS Essentials

By : Gunasundaram

3 (1)

CORS Essentials

3 (1)

By: Gunasundaram

Overview of this book

This book explains how to use CORS, including specific implementations for platforms such as Drupal, WordPress, IIS Server, ASP.NET, JBoss, Windows Azure, and Salesforce, as well as how to use CORS in the Cloud on Amazon AWS, YouTube, Mulesoft, and others. It examines limitations, security risks, and alternatives to CORS. It explores the W3C Specification and major developer documentation sources about CORS. It attempts to predict what kinds of extension to the CORS specification, or completely new techniques, will come in the future to address the limitations of CORS Web developers will learn how to share code and assets across domains with CORS. They will learn a variety of techniques that are rather similar in their method and syntax. The book is organized by similar types of framework and application, so it can be used as a reference. Developers will learn about special cases, such as when a proxy is necessary. And they will learn about some alternative techniques that achieve similar goals, and when they may be preferable to using CORS

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Free Chapter

1. Why You Need CORS

1. Why You Need CORS

The same-origin policy

Considering the origin of entities

Commonly allowed cross-origin resource sharing

Permissions required by JavaScript

How CORS works – the header and the request

CORS with Preflight

Troubleshooting and debugging CORS

CORS with jQuery

Enabling CORS globally with server configuration

Alternatives to CORS

Summary

2. Creating Proxies for CORS

2. Creating Proxies for CORS

Proxies and the World Wide Web

What is a proxy server?

Reasons to use a proxy

Creating a proxy server with Google App Engine

Summary

3. Usability and Security

3. Usability and Security

CORS usability

Enhancing security in CORS

Summary

4. CORS in Popular Content Management Frameworks

4. CORS in Popular Content Management Frameworks

Incoming CORS requests

SAAS or self-hosted?

CORS in WordPress

CORS in Drupal

CORS in Joomla!

CORS in Adobe Experience Manager

Summary

5. CORS in Windows

5. CORS in Windows

Incoming CORS requests

How to set the Access-Control-Allow-Origin header globally in Windows IIS Server

CORS in the ASP.NET Web API

CORS in Windows Communication Foundation

CORS in Windows browsers – Internet Explorer and Edge

Summary

6. CORS in the Cloud

6. CORS in the Cloud

CORS requests in cloud APIs

CORS in Amazon Simple Storage Service (S3)

Using CORS in Google Cloud Storage

Authenticated access to Google APIs with CORS

CORS in IBM Cloudant

CORS in Windows Azure Storage

CORS in Box API

CORS in the Dropbox API

Summary

References

7. CORS in Node.js

7. CORS in Node.js

JavaScript frameworks are very popular

Introduction to Node.js

JavaScript frameworks that work with Node.js

CORS in Express.js

CORS npm for Express.js using Connect.js middleware

CORS in AngularJS

CORS in Backbone.js

Node.js and JavaScript frameworks are evolving rapidly

Summary

References

8. CORS Best Practices

8. CORS Best Practices

Enabling API to public CORS requests

Limiting API to allow CORS requests to a whitelisted set of origins

Protecting against cross-site request forgery (CSRF)

Summary

Index

Index

Customer Reviews

3 (1)

5 star

0

4 star

0

3 star

100%

2 star

0

1 star

0

CORS in the Dropbox API

Dropbox provides the simple storage of files, which may be shared via preview/download links. CORS is supported for direct links in the Dropbox chooser, which allows you to read the file information directly in the browser using client-side JavaScript. Direct links should not be used to display content directly in the browser. Direct links point directly to the contents of the file and are useful for downloading the file itself. Unlike Preview Links, they expire after four hours, so make sure to download the contents of the file immediately after the file is chosen.

Refer to the Dropbox documentation for more information on using chooser: .

Support for simple requests using simple headers via CORS, including support for XdomainRequest, is provided in dropbox.js in the src/util/xhr.coffee file. dropbox.js is the unofficial JavaScript library for the Dropbox core API:

  # Using the header names listed at
  # http://www.w3.org/TR/cors/#simple-response-header
  # and the...

Search

Your notes and bookmarks