Chrome扩展:拒绝头"日期"在Ajax请求日期、Chrome、QUOT、Ajax

2023-09-11 01:01:45 作者:鸡冻不如行动

我必须使用API​​(AJAX)一个JavaScript code,我需要发送标题日期,以API服务器(需要的头),而Chrome告诉我'拒绝设定不安全的标题日期 我得到的API,服务器的响应,如缺少必需的HTTP日期标题。

I have a javascript code to be used for api (ajax) and I need to send header "date" to api-server (required header), but chrome tells me 'refused to set unsafe header "Date" ' and I get response from api-server like "missing required http date header".

我使用jQuery。

I'm using jquery.

code样品:

code sample:

var d = new Date();
var headers = {};
headers["Date"] = d.toUTCString();
jQuery.ajax({
            url: '<some HTTPS url>'
            type: "get",
            crossDomain: true,
            headers: headers,
            ....

})

在同一code正常工作在Firefox。 没有任何人有任何想法如何解决这个问题?

the same code works fine in firefox. does anybody have any ideas how to fix it?

推荐答案

是的Chrome浏览器必须拒绝你的要求,因为标准说:

Yeah Chrome must refuse your request because the standard says:

终止这些步骤,如果头都不匹配以下标题之一:   [...]

Terminate these steps if header is a match for one of the following headers: [...]   日期   

参考:http://www.w3.org/TR/XMLHtt$p$pquest/#the-setrequestheader-method