foreword
preface
acknowledgments
about this book
author online
about the author
about the cover illustration
Part 1 Introducing CORS
Chapter 1 The Core of CORS
What is CORS?
CORS by example
Benefits of CORS
Summary
Chapter 2 Making CORS requests
What is a cross-origin request?
Browser support for CORS
Using the XMLHttpRequest object
XDomainRequest object in Internet Explorer 8 and 9
Canvas and cross-origin images
CORS requests from jQuery
Summary
Part 2 CORS on the server
Chapter 3 Handling CORS requests
Setting up the sample code
Making a CORS request
Anatomy of a CORS request
Making a request with the Origin header
Responding to a CORS request
Summary
Chapter 4 Handling preflight requests
What is a preflight request?
Triggering a preflight request
Identifying a preflight request
Responding to a preflight request
Recapping preflights
Preflight result cache
Summary
Chapter 5 Cookies and response headers
Supporting cookies in CORS requests
Exposing response headers to the client
Summary
Chapter 6 Best practices
Refactoring the sample code
Before you begin
Setting the Access-Control-Allow-Origin header
Security
Handling preflight requests
Reducing preflight requests
Exposing response headers
CORS and redirects
Summary
Part 3 Debugging CORS requests
Chapter 7 Debugging CORS requests
Solving CORS errors
Using the browser’s developer tools
Monitoring network traffic
Using curl to simulate CORS requests
Sending requests using test-cors.org
Tips for mobile debugging
Getting help
Summary
Appendixes
appendix A CORS reference
HTTP headers
Other terms used in CORS
appendix B Configuring your environment
Setting up for the sample application
Debugging tools
Resources
appendix C What is CSRF?
What is CSRF?
Implementing CSRF protection for same-origin requests
appendix D Other cross-origin techniques
JSONP
Flash
postMessage and easyXDM
Server-side request
index
· · · · · · (收起)