14,974
edits
mNo edit summary |
|||
| Line 16: | Line 16: | ||
#* iframe: Available<ref>[https://stackoverflow.com/questions/164085/javascript-callback-when-iframe-is-finished-loading events - Javascript callback when IFRAME is finished loading? - Stack Overflow]</ref> ''not verified'' | #* iframe: Available<ref>[https://stackoverflow.com/questions/164085/javascript-callback-when-iframe-is-finished-loading events - Javascript callback when IFRAME is finished loading? - Stack Overflow]</ref> ''not verified'' | ||
#* ajax: Available<ref>[http://api.jquery.com/jquery.ajax/ jQuery.ajax() | jQuery API Documentation]</ref> | #* ajax: Available<ref>[http://api.jquery.com/jquery.ajax/ jQuery.ajax() | jQuery API Documentation]</ref> | ||
<table border="1"> | |||
<tr> | |||
<th>remote website -> origin website</th> | |||
<th>embed remote image file</th> | |||
<th>embed javascript file</th> | |||
<th>ajax call remote json file</th> | |||
</tr> | |||
<tr> | |||
<td>remote: url start with http not https -> origin: localhost</td> | |||
<td>ok</td> | |||
<td>ok</td> | |||
<td>Error: "... has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource"</td> | |||
</tr> | |||
<tr> | |||
<td>remote: url start with https -> origin: localhost</td> | |||
<td>ok</td> | |||
<td>ok</td> | |||
<td>Error: "... has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource"</td> | |||
</tr> | |||
<tr> | |||
<td>remote: url start with http -> origin: https</td> | |||
<td>ok</td> | |||
<td>Error: "Mixed Content: The page at 'https://website' was loaded over HTTPS, but requested an insecure script 'http://remote_website/file.js'. This request has been blocked; the content must be served over HTTPS. | |||
"</td> | |||
<td>Error: "... has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource"</td> | |||
</tr> | |||
<tr> | |||
<td>remote: url start with https -> origin: http</td> | |||
<td>ok</td> | |||
<td>ok</td> | |||
<td>Error: "... has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource"</td> | |||
</tr> | |||
</table> | |||
= client-side approach = | = client-side approach = | ||