How to enable CORS on Firefox?
Can somebody please tell me how I allow CORS on firefox? I easily managed it on Chrome and IE, but I am totally failing at it with Firefox. I edited the following about:config entry
security.fileuri.strict_origin_policy = false
This attempt has been posted several times here and is told on other sites too, but it has no effect. I read the Mozilla guide to Same-origin-policies:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS
but it just explains CORS and the related topics. A workaround to enable it on FF is not listed.
I would really appreciate a definitive solution.
ps: FORCECORS does not work either somehow...
Answer
Do nothing to the browser. CORS is supported by default on all modern browsers (and since Firefox 3.5).
The server being accessed by JavaScript has to give the site hosting the HTML document in which the JS is running permission via CORS HTTP response headers.
security.fileuri.strict_origin_policy is used to give JS in local HTML documents access to your entire hard disk. Don't set it to false as it makes you vulnerable to attacks from downloaded HTML documents (including email attachments).