[Calendar and Contacts Server] #468: Cross domain queries in Web browsers
#468: Cross domain queries in Web browsers -----------------------------+---------------------------------------------- Reporter: jan.mate@… | Owner: wsanchez@… Type: Enhancement | Status: new Priority: 3: Important | Milestone: Component: Calendar Server | Severity: Other Keywords: | Radar: -----------------------------+---------------------------------------------- It is impossible to access the calendarserver from javascript due to cross domain security limitations in modern browsers. To allow cross domain queries from javascript based caldav/carddav clients it is important to add several new headers to each response (see http://www.w3.org/TR/cors/). For example, to use my CardDavMATE client (fully javascript based) the user must patch the calendarserver (see the included patch). -- Ticket URL: <http://trac.calendarserver.org/ticket/468> Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server
#468: Cross domain queries in Web browsers -----------------------------+---------------------------------------------- Reporter: jan.mate@… | Owner: glyph@… Type: Enhancement | Status: new Priority: 3: Important | Milestone: CalendarServer-3.x Component: Calendar Server | Severity: Other Keywords: | Radar: -----------------------------+---------------------------------------------- Changes (by wsanchez@…): * owner: wsanchez@… => glyph@… * milestone: => CalendarServer-3.x -- Ticket URL: <http://trac.calendarserver.org/ticket/468#comment:1> Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server
#468: Cross domain queries in Web browsers -----------------------------+---------------------------------------------- Reporter: jan.mate@… | Owner: glyph@… Type: Enhancement | Status: new Priority: 3: Important | Milestone: CalendarServer-3.x Component: Calendar Server | Severity: Other Keywords: | Radar: -----------------------------+---------------------------------------------- Comment(by wsanchez@…): I hate web browsers… I'm not sure the `web2/server.py` is appropriate… I assume these values aren't correct for all servers, or you wouldn't need these headers in the first place. Certainly the allowed methods list needs to correspond to what's allowed on the resource being requested. -- Ticket URL: <http://trac.calendarserver.org/ticket/468#comment:2> Calendar and Contacts Server </> HTTP/WebDAV/CalDAV Server
participants (1)
-
Calendar and Contacts Server