仅针对HttpModule中的特定域启用CORS

Question

我有一个asp.net Web表单应用程序，我只想对特定域启用CORS。我正在尝试使用HttpModule实现此目的。

例如我的网站是https://mysiteex.com

应该从https://third-party1.com和https://third-party2.com启用CORS

Answer 1

这可能是您要寻找的。将using System.Web;和下面的代码放入Application_BeginRequest事件的Global.asax文件中。

        protected void Application_BeginRequest(object sender, EventArgs e)
    {
        // Enable CORS for cross-site scripting.

        var context = HttpContext.Current;
        var response = context.Response;

        // enable CORS. "*" = all domains, substitute your own as needed.
        response.AddHeader("Access-Control-Allow-Origin", "*");

        if (context.Request.HttpMethod == "OPTIONS")
        {
            response.AddHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
            response.AddHeader("Access-Control-Allow-Headers", "Content-Type, Accept");
            response.End();
        }
    }