https://enable-cors.org/server_expressjs.html
https://github.com/monsur/enable-cors.org
app.use(function(req, res, next) {
res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept");
next();
});
app.get('/', function(req, res, next) {
// Handle the get for this route
});
app.post('/', function(req, res, next) {
// Handle the post for this route
});var express = require('express')
, app = express.createServer();
app.get('/', function (req, res, next) {
res.header("Access-Control-Allow-Origin", "*");
res.header("Access-Control-Allow-Headers", "X-Requested-With");
next();
});
app.configure(function () {
app.use(express.methodOverride());
app.use(express.bodyParser());
app.use(app.router);
});
app.configure('development', function () {
app.use(express.static(__dirname + '/public'));
app.use(express.errorHandler({ dumpExceptions: true, showStack: true }));
});
app.configure('production', function () {
var oneYear = 31557600000;
// app.use(express.static(__dirname + '/public', { maxAge: oneYear }));
app.use(express.static(__dirname + '/public'));
app.use(express.errorHandler());
});
app.listen(8888);
console.log('express running at http://localhost:%d', 8888);https://stackoverflow.com/questions/5916900/how-can-you-detect-the-version-of-a-browser
对预检要求的响应不通过访问控制检查：请求资源上不存在“Access-Control-Allow-Origin”头。
Origin'null'因此不被允许访问。
该响应具有HTTP状态代码405。
如果一个不透明的响应满足您的需要，请将该请求的模式设置为“no-cors”，以禁用CORS来获取资源。