zoukankan      html  css  js  c++  java
  • NodeJS跨域问题

    一、使用cors中间件解决跨域(推荐)

    var cors = require("cors"); //  cnpm install cors
    
    app.use(cors({
      methods: ["GET", "POST"],
      alloweHeaders: ["Content-Type", "application/json;charset=utf-8;application/x-www-form-urlencoded"]
    }));

    二、传统的方式解决跨域问题

    const express = require('express'),
        app = express(),
        router = express.Router(),
        bodyParser = require('body-parser'); // 解析请求的body中的内容[必须]
    
    router.all('*', function(req, res, next) { // '*'代表所有的访问者都能访问
        res.header("X-Powered-By",' 3.2.1')
        res.header("Access-Control-Allow-Origin", "*");
        res.header("Access-Control-Allow-Headers", "X-Requested-With");
        res.header("Content-Type", "application/json;charset=utf-8");
        res.header("Content-Type", "application/x-www-form-urlencoded;charset=utf-8");
    
        res.header('Access-Control-Allow-Methods', 'PUT, POST, GET, DELETE, OPTIONS');
        res.header('Access-Control-Allow-Headers', 'Content-Type, Content-Length, Authorization, Accept, X-Requested-With , yourHeaderFeild');
        next();
    });
    
    // parse application/x-www-form-urlencoded
    app.use(bodyParser.urlencoded({ extended: false }))
    // parse application/json
    app.use(bodyParser.json())
    
    app.use(express.static('public'));
    app.use('/api', router);//访问每个接口前边都需要加上(api/)(eg:http://localhost:3000/api/students)
    
    app.listen(3000, 
        () => console.log('Example app listening on port 3000!'));
    
    router.post('/students', function(req, res, next){
        var data = req.body;
        console.log(data);
        res.json({ 
            status:1,
            data:{
                user: 'post'
            },
        });
    });
    
    router.get('/students', function(req, res, next){
        var data = req.query;
        console.log(data);
        res.json({ 
            status:1,
            data:{
                user: 'get'
            },
        });
    });

      

  • 相关阅读:
    解决在cmd命令下不能输入中文方法
    报错注入
    html表单中的name属性和value属性
    xss漏洞
    DVWA-xss反射型(跨站脚本漏洞)
    DVWA-brute force
    owsap top 10 2017(十大web安全应用程序安全)
    sqli_labs less-5
    盲注
    c++ 类
  • 原文地址:https://www.cnblogs.com/zhizou/p/10495013.html
Copyright © 2011-2022 走看看