$http.get is not allowed by Access-Control-Allow-Origin but $.ajax is

by

This is probably due to the default behavior of Angular to include the request header 'X-Requested-With', which can cause problems with CORS. This was fixed in v 1.1.1 (the unstable branch – see v1.1.1 bug fixes) by removing the header from cross domain requests: https://github.com/angular/angular.js/issues/1004.

It’s easy to remove the header and get this working on the 1.0 branch. The following line will remove the header from all requests (not only CORS) done by the $http service in your app:

yourModule
  .config(function($httpProvider){
    delete $httpProvider.defaults.headers.common['X-Requested-With'];
});

Update
A little warning – Angular (like jQuery) doesn’t support CORS for IE9. IE10 is the first IE browser that supports CORS. This blogpost describes how you can get CORS support in IE8/IE9 under certain conditions, but it won’t work with the Angular $http service: http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-workarounds.aspx

More Related Contents:

  1. CORS: Cannot use wildcard in Access-Control-Allow-Origin when credentials flag is true
  2. How can I post data as form data instead of a request payload?
  3. What is the motivation behind the introduction of preflight CORS requests?
  4. Same origin Policy and CORS (Cross-origin resource sharing)
  5. What security risks exist when setting Access-Control-Allow-Origin to accept all domains?
  6. CORS issue while making an Ajax request for oauth2 access token
  7. AngularJS POST Fails: Response for preflight has invalid HTTP status code 404
  8. API Gateway CORS: no ‘Access-Control-Allow-Origin’ header
  9. Cross-Domain AJAX doesn’t send X-Requested-With header
  10. Access denied in IE 10 and 11 when ajax target is localhost
  11. No ‘Access-Control-Allow-Origin’ header is present on the requested resource- AngularJS
  12. Preview Image before uploading Angularjs
  13. Set-Cookie on Browser with Ajax Request via CORS
  14. HTML5 Video is not working with AngularJS ng-src tag
  15. Sharing a variable between controllers in angular.js
  16. CORS error for application running from file:// scheme
  17. Ajax call bug with Chrome new version 73.0.3683.75?
  18. Enable CORS in Golang
  19. Web sockets make ajax/CORS obsolete?
  20. Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at
  21. Cross-Origin Request Blocked
  22. Origin is not allowed by Access-Control-Allow-Origin
  23. how to bypass Access-Control-Allow-Origin?
  24. Ajax using https on an http page
  25. Call jQuery Ajax Request Each X Minutes
  26. Why the cross-domain Ajax is a security concern?
  27. $.ajax call working fine in IE8 and Doesn’t work in firefox and chrome browsers
  28. In javascript, how can I uniquely identify one browser window from another which are under the same cookiedbased sessionId
  29. XMLHttpRequest: Network Error 0x80070005, Access is denied on Microsoft Edge (but not IE)
  30. phonegap: cookie based authentication (PHP) not working [webview]

Leave a Comment