android - Javascript Testing Webservice Locally - CORS -
i'm attempting build jquery mobile application locally connect website via xmlhttprequest/xcrf/json. when attempting connect website following error:
xmlhttprequest cannot load http://wwws.mydomain.com/rest/system/connect. wildcard '*' cannot used in 'access-control-allow-origin' header when credentials flag true. origin 'http://localhost' therefore not allowed access.
i'm enabled cors on webserver (mydomain.com) per cors documentation:
header set access-control-allow-origin "*"
how can test webservice outside of website? when converted android app have similar problems?
this part of security, cannot that. if want allow credentials access-control-allow-origin must not use *.
check out these thread: cross origin resource sharing credentials