本文探讨了在前端开发中跨域请求时遇到的问题及解决方法。重点介绍了如何通过设置XMLHttpRequest的withCredentials属性来避免因Access-Control-Allow-Origin不当设置导致的安全错误。
The value of the ‘Access-Control-Allow-Origin’ header in the response must not be the wildcard ‘*’ when the request’s credentials mode is ‘include’. Origin ‘’ is therefore not allowed access. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
http状态码变成产生204，前端报这个错误，解决方案有两个：
1.把withCredentials设置为false，不允许cookie
2.配置withCredentials=true, 后端需配置Access-Control-Allow-Credentials，Access-Control-Allow-Origin不能为*, 必须是地址
扫一扫
2828
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
