[
https://issues.apache.org/jira/browse/STANBOL-105?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13119217#comment-13119217
]
Rupert Westenthaler commented on STANBOL-105:
---------------------------------------------
Added Support for CORS Allow-Origin and preflight requests.
The Origin globally allowed by Stanbol are configured with the JesreyEndpoint
component. If '*' is configured, than all origins are allowed and
"Access-Control-Allow-Origin: * " will be returned in CORS enabled responses.
Otherwise the Origin is checked with equals to the configured list.
Currently the /enhance and the /entityhub services are CORS enabled. The other
services do currently not support CORS
> Support Multi-Site Scripting via Cross-Origin Resource Sharing
> --------------------------------------------------------------
>
> Key: STANBOL-105
> URL: https://issues.apache.org/jira/browse/STANBOL-105
> Project: Stanbol
> Issue Type: New Feature
> Components: Enhancer, Entity Hub, KReS
> Reporter: Rupert Westenthaler
>
> See http://www.w3.org/TR/cors/ for the specification and
> https://developer.mozilla.org/En/HTTP_Access_Control describes a nice
> description with examples.
> basically if http://example.com needs to request the stambol server running
> at http://stanbol.demo.org
> than the header will include
> GET /resources/public-data/ HTTP/1.1
> Host: http://stanbol.demo.org
> Accept: application/rdf+json
> Origin: http://example.com
> and the response needs to include
> Access-Control-Allow-Origin: *
> telling the browser that it can use the returned data with any other domain.
> For requests other than GET and POST (with content types !=
> application/x-www-form-urlencoded, multipart/form-data, or text/plain) one
> need to use Preflighted requests (something more complex because is requires
> the use of an additional OPTIONS request).
> This would be an replacement for the request to implement JSONP. In addition
> it is based on an official specification by W3C and it supports all HTTP
> request types.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
