javascript - how to secure my ajax request which comes from multiple domain? -


i want accept limit domain requests such want accept request comes www.abc.com , www.xyz.com other request should denied . can't use token process server side because multiple domain using javascript code here can't think server side token , http_addr can manipulate javascript. please suggest how validate reliable?

xmlhttprequest insert an origin header request tells site request came from.

use populate the access-control-allow-origin header.

(this, obviously, provides no protection against non-ajax requests).


Comments

Popular posts from this blog

How has firefox/gecko HTML+CSS rendering changed in version 38? -

javascript - Complex json ng-repeat -

jquery - Cloning of rows and columns from the old table into the new with colSpan and rowSpan -