訪問控制 - 允許 - 來源不允許

Question

爲什麼我的網址已經在Access-Control-Allow-Origin的頭部了！

錯誤

XMLHttpRequest cannot load http://cdn.localhost/data/voucher/16_ead32751b66fd6c7856b7db0e186574df37a7d08.pdf. Origin http://secure.localhost is not allowed by Access-Control-Allow-Origin. 
Refused to get unsafe header "Accept-Ranges" 

htaccess的（cdn.localhost）

Header add Access-Control-Allow-Origin "http://secure.localhost" 

Answer 1

也可以嘗試從this post發送以下標題：

// Specify domains from which requests are allowed 
header('Access-Control-Allow-Origin: *'); 

// Specify which request methods are allowed 
header('Access-Control-Allow-Methods: GET, POST, OPTIONS'); 

// Additional headers which may be sent along with the CORS request 
// The X-Requested-With header allows jQuery requests to go through 
header('Access-Control-Allow-Headers: X-Requested-With'); 

// Set the age to 1 day to improve speed/caching. 
header('Access-Control-Max-Age: 86400'); 

Answer 2

爲規範訪問控制 - 允許 - Origin談到空格分隔的URL語法。也許第二次出現的頭部會覆蓋客戶端中的第一個 - 在單個頭部中嘗試多值版本。