我必须使用API(AJAX)一个JavaScript code,我需要发送标题日期,以API服务器(需要的头),而Chrome告诉我'拒绝设定不安全的标题日期 我得到的API,服务器的响应,如缺少必需的HTTP日期标题。
I have a javascript code to be used for api (ajax) and I need to send header "date" to api-server (required header), but chrome tells me 'refused to set unsafe header "Date" ' and I get response from api-server like "missing required http date header".
我使用jQuery。
I'm using jquery.
code样品:
code sample:
var d = new Date();
var headers = {};
headers["Date"] = d.toUTCString();
jQuery.ajax({
url: '<some HTTPS url>'
type: "get",
crossDomain: true,
headers: headers,
....
})
在同一code正常工作在Firefox。 没有任何人有任何想法如何解决这个问题?
the same code works fine in firefox. does anybody have any ideas how to fix it?
是的Chrome浏览器必须拒绝你的要求,因为标准说:
Yeah Chrome must refuse your request because the standard says:
终止这些步骤,如果头都不匹配以下标题之一: [...]
Terminate these steps if header is a match for one of the following headers: [...] 日期
参考:http://www.w3.org/TR/XMLHtt$p$pquest/#the-setrequestheader-method