CORS 策略已阻止从源“null”访问 XMLHttpRequest：对预检请求的响应未通过访问控制 [重复]

Posted 2023-03-04

【中文标题】CORS 策略已阻止从源“null”访问 XMLHttpRequest：对预检请求的响应未通过访问控制 [重复]

【英文标题】：Access to XMLHttpRequest at from origin 'null' has been blocked by CORS policy: Response to preflight request doesn't pass access control [duplicate]

【发布时间】：2020-10-25 03:23:25

【问题描述】：

我正在执行以下代码，但出现错误。如何修复它..我在 POSTMAN 中工作正常..在 chrome 中它抛出错误

jscallout.html:1 Access to XMLHttpRequest at 'https://api.getresponse.com/v3/contacts' from origin 'null' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.

JS-

<script>
const request = new XMLHttpRequest();
request.open("GET","https://api.getresponse.com/v3/contacts");
request.setRequestHeader("X-Auth-Token","api-key 1234567890");
request.setRequestHeader('Access-Control-Allow-Origin','*');
request.setRequestHeader('Access-Control-Allow-Methods','GET');
request.setRequestHeader('Access-Control-Allow-Headers','X-Auth-Token,Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With');
request.send();
request.onload = ()=>
    console.log(request);
    if(request.status == 200) 
        console.log(JSON.parse(request.response));
    

</script>

【参考方案1】：

我想这需要配置服务器端，在服务器端启用 CORS 并接受来自某些白名单 url 的请求。