CORS request not working in Safari

by

I encountered the same error when making an XHR request against a file in Amazon S3. On Safari 7 it was failing. I know you’re not using Amazon S3, but I thought I’d post in case this solution helped others.

The problem was that Safari 7 set the Access-Control-Request-Headers header to “origin, x-requested-with”, but my AWS CORS configuration only allowed “x-requested-with”:

<?xml version="1.0" encoding="UTF-8"?>
<CORSConfiguration xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
    <CORSRule>
        <AllowedOrigin>*</AllowedOrigin>
        <AllowedMethod>GET</AllowedMethod>
        <MaxAgeSeconds>3000</MaxAgeSeconds>
        <AllowedHeader>Authorization</AllowedHeader>
        <AllowedHeader>x-requested-with</AllowedHeader>
    </CORSRule>
</CORSConfiguration>

I added “origin” as an allowed header and everything worked fine.

        <AllowedHeader>origin</AllowedHeader>

Note: the AllowedOrigin of * is for development purposes only. See @andes comment below for more information.

More Related Contents:

  1. “Origin null is not allowed by Access-Control-Allow-Origin” error for request made by application running from a file:// URL
  2. Origin is not allowed by Access-Control-Allow-Origin
  3. How to enable CORS in AngularJs
  4. Why does my http://localhost CORS origin not work?
  5. Origin null is not allowed by Access-Control-Allow-Origin
  6. enabling cross-origin resource sharing on IIS7
  7. No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘…’ is therefore not allowed access
  8. Why am I seeing an “origin is not allowed by Access-Control-Allow-Origin” error here? [duplicate]
  9. A CORS POST request works from plain JavaScript, but why not with jQuery?
  10. AngularJS: No “Access-Control-Allow-Origin” header is present on the requested resource [duplicate]
  11. Why am I seeing an “origin is not allowed by Access-Control-Allow-Origin” error here? [duplicate]
  12. Understanding XMLHttpRequest over CORS (responseText)
  13. Catching an Access-Control-Allow-Origin error in JavaScript
  14. How to Detect Cross Origin (CORS) Error vs. Other Types of Errors for XMLHttpRequest() in Javascript
  15. Microsoft Edge blocked cross-domain requests sent to IPs in same private network CIDR
  16. Send POST data using XMLHttpRequest
  17. Response to preflight request doesn’t pass access control check
  18. Handle response – SyntaxError: Unexpected end of input when using mode: ‘no-cors’
  19. How to make cross domain request [duplicate]
  20. window.open(url, ‘_blank’); not working on iMac/Safari
  21. Method for streaming data from browser to server via HTTP
  22. How do I send an HTTP GET request from a Chrome extension?
  23. Uncaught (in promise) TypeError: Failed to fetch and Cors error
  24. Is there a way to enable the JavaScript Error/Debug Console for Safari within Android?
  25. Cross-origin resource sharing (CORS) concept
  26. CORS error for application running from file:// scheme
  27. Eliminate 300ms delay on click events in mobile Safari
  28. CSRF protection with CORS Origin header vs. CSRF token
  29. Impossible to hide navigation bars in Safari iOS 7 for iPhone/iPod touch
  30. Intercept XMLHttpRequest and modify responseText

Leave a Comment