sideshowbarker's user avatar
sideshowbarker's user avatar
sideshowbarker's user avatar
sideshowbarker
Moderator
  • Member for 13 years
  • Last seen this week
1703 votes
Accepted

No 'Access-Control-Allow-Origin' header is present on the requested resource—when trying to get data from a REST API

744 votes

Trying to use fetch and pass in mode: no-cors

484 votes
Accepted

Git error - gpg failed to sign data

330 votes
Accepted

What’s the purpose of the HTML "nonce" attribute for script and style elements?

234 votes
Accepted

CORS Error: “requests are only supported for protocol schemes: http…” etc

171 votes
Accepted

How to resolve 'preflight is invalid (redirect)' or 'redirect is not allowed for a preflight request'

143 votes
Accepted

git - gpg onto mac osx: error: gpg failed to sign the data

140 votes
Accepted

What’s the purpose of the HTML “nomodule” attribute for script elements if the default is text/javascript?

125 votes
Accepted

When do browsers send the Origin header? When do browsers set the origin to null?

109 votes
Accepted

Handle response - SyntaxError: Unexpected end of input when using mode: 'no-cors'

73 votes
Accepted

cors-anywhere.herokuapp.com not working (503). What else can I try?

71 votes
Accepted

HTML5 Notification not working in Mobile Chrome

63 votes

How to intercept all http requests including form submits

62 votes

What is protocol and host combined called?

58 votes
Accepted

Why is there no preflight in CORS for POST requests with standard content-type

58 votes
Accepted

Google Chrome Stripping nonce values from script tags

55 votes
Accepted

What are proper status codes for CORS preflight requests?

48 votes

Should I care about W3C validation?

44 votes
Accepted

Will CORS policy prevent resource access from non-browser requests?

43 votes
Accepted

What is happening when I have two CSP (Content Security Policies) policies - header & meta?

38 votes
Accepted

Can I use DOM query methods against a Fetch API response?

38 votes
Accepted

Script causes “Refused to execute inline script: Either the 'unsafe-inline' keyword, a hash… or a nonce is required to enable inline execution”

37 votes

CORS security with ”Access-Control-Allow-Origin: *“ (wildcard)

36 votes
Accepted

Preflight request is sent with all methods

34 votes
Accepted

Fetch API - What's the use of redirect: manual

32 votes
Accepted

Why does the browser send an OPTIONS request even though my frontend code is just making a POST request?

32 votes
Accepted

Making fetch API work with CORS after OPTIONS response

32 votes
Accepted

How to CORS-enable Apache web server (including preflight and custom headers)?

31 votes
Accepted

“Request header field Access-Control-Allow-Origin is not allowed by Access-Control-Allow-Headers in preflight response” despite valid CORS config

30 votes
Accepted

Does IOS Safari support Shadow DOM?

1
2 3 4 5
22