Ajax访问接口，提示已拦截跨源请求：同源策略禁止读取位于。。。

2018-07-06 10:48:59 5.3k 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

Bellhop水声信道模型的仿真 Bellhop是一种基于射线追踪的水声信道模型，广泛用于预测水下环境中的声压场。它通过模拟声波在水中的传播路径，计算声场分布，适用于复杂的水下通信场景。阅读详情

请求访问的地址:http://www.wanhai.com/views/quick/cargo_tracking.xhtml



       var settings = {

           "async": true,

           "crossDomain": true,

           "url": "http://www.wanhai.com/views/quick/cargo_tracking.xhtml",

           "method": "POST",

           "headers": {

               "content-type": "application/x-www-form-urlencoded",

               "cache-control": "no-cache",

               "postman-token": "790bc9ac-1215-ff3e-2293-ecc3d6eb0c0a"

           },

           "data": {

               "cargoTrackListBean": "cargoTrackListBean",

               "cargoType": "2",

               "j_idt6": "Query",

               "q_ref_no1": "0398A11554"

           }

       }



       $.ajax(settings).done(function (response) {

           console.log(response);

       });

//以上代码是用PostMan导出的；PostMan中是可以访问并返回数据的

实际代码请求这个接口的时候，浏览器就提示下面这个错误了

温馨提示：上面那个接口是别人的，我修改不了，没有源代码

...全文

海波龙(Oracle Hyperion)单点登陆问题记录 Oracle海波龙套件已经多年未更新，按Oracle官方文档实施单点登陆启用之后，SmartView工具通过专用链接方式无法登陆系统。在抓包逆向分析之后定位到HspSmartViewServlet类在执行以下代码时获得的ssotoken无效导致，在某大厂工作的时候曾通过在filter中截获请求的方式植入Attribute，保留账号密码并在单点程序中处理实现登陆。但在完美世界的环境中... 阅读详情

听雨停了

Ajax 52,778 成员 25,334 内容

+ 关注 + 加入社区

切换为时间正序

htcyrylcmj0415 2018-07-09

打赏
举报

			$.ajax({

				type:"POST",

				url:"https://localhost:8443/htcpw/htcpwApi/jf",//地址是自己搭建服务器的接口

				async:true,

				data:{"n": queryName},

				dataType:"json",

				timeout: 1000,

				success:function(data) {

				},

				complete : function(XMLHttpRequest,status){ //请求完成后最终执行参数

			　　　　if(status=='timeout'){//超时,status还有success,error等值的情况

			 　　　　　 ajaxTimeOut.abort(); //取消请求

			　　　　}

			　　}

			});

如1楼所说的,上面请求的API里面要写上
response.setHeader("Access-Control-Allow-Origin", "*");
如果你的网站和目标网站的协议不一样(不都是http或者https)
建议把你的网站弄成https的
ps:我自己这的情况的目标网站是http的,我的是https的,没法直接从https发送http请求
然后用下面的代码生成文件复制到E:\jdk1.7.0_21\jre\lib\security下

package util;



import java.io.BufferedReader;

import java.io.File;

import java.io.FileInputStream;

import java.io.FileOutputStream;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.io.OutputStream;

import java.security.KeyStore;

import java.security.MessageDigest;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;



import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLException;

import javax.net.ssl.SSLSocket;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

import javax.net.ssl.TrustManagerFactory;

import javax.net.ssl.X509TrustManager;



public class InstallCert {



	public static void main(String[] args) throws Exception {

		String host;

		int port;

		char[] passphrase;

	    String[] h={"supermariomakerbookmark.nintendo.net"};//dypqnhofrd2x2.cloudfront.net

	    //openapi.youdao.com

	    args = h;

	    String alina = "jssecacerts";

		if ((args.length == 1) || (args.length == 2)) {

			String[] c = args[0].split(":");

			host = c[0];

			port = (c.length == 1) ? 443 : Integer.parseInt(c[1]);

			String p = (args.length == 1) ? "changeit" : args[1];

			passphrase = p.toCharArray();

		} else {

			System.out

					.println("Usage: java InstallCert <host>[:port] [passphrase]");

			return;

		}



		File file = new File(alina);

		if (file.isFile() == false) {

			char SEP = File.separatorChar;

			File dir = new File(System.getProperty("java.home") + SEP + "lib"

					+ SEP + "security");

			file = new File(dir, alina);

			if (file.isFile() == false) {

				file = new File(dir, "cacerts");

			}

		}

		System.out.println("Loading KeyStore " + file + "...");

		InputStream in = new FileInputStream(file);

		KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

		ks.load(in, passphrase);

		in.close();



		SSLContext context = SSLContext.getInstance("TLS");

		TrustManagerFactory tmf = TrustManagerFactory

				.getInstance(TrustManagerFactory.getDefaultAlgorithm());

		tmf.init(ks);

		X509TrustManager defaultTrustManager = (X509TrustManager) tmf

				.getTrustManagers()[0];

		SavingTrustManager tm = new SavingTrustManager(defaultTrustManager);

		context.init(null, new TrustManager[] { tm }, null);

		SSLSocketFactory factory = context.getSocketFactory();



		System.out

				.println("Opening connection to " + host + ":" + port + "...");

		SSLSocket socket = (SSLSocket) factory.createSocket(host, port);

		socket.setSoTimeout(10000);

		try {

			System.out.println("Starting SSL handshake...");

			socket.startHandshake();

			socket.close();

			System.out.println();

			System.out.println("No errors, certificate is already trusted");

		} catch (SSLException e) {

			System.out.println();

			e.printStackTrace(System.out);

		}



		X509Certificate[] chain = tm.chain;

		if (chain == null) {

			System.out.println("Could not obtain server certificate chain");

			return;

		}



		BufferedReader reader = new BufferedReader(new InputStreamReader(

				System.in));



		System.out.println();

		System.out.println("Server sent " + chain.length + " certificate(s):");

		System.out.println();

		MessageDigest sha1 = MessageDigest.getInstance("SHA1");

		MessageDigest md5 = MessageDigest.getInstance("MD5");

		for (int i = 0; i < chain.length; i++) {

			X509Certificate cert = chain[i];

			System.out.println(" " + (i + 1) + " Subject "

					+ cert.getSubjectDN());

			System.out.println("   Issuer  " + cert.getIssuerDN());

			sha1.update(cert.getEncoded());

			System.out.println("   sha1    " + toHexString(sha1.digest()));

			md5.update(cert.getEncoded());

			System.out.println("   md5     " + toHexString(md5.digest()));

			System.out.println();

		}



		System.out

				.println("Enter certificate to add to trusted keystore or 'q' to quit: [1]");

		String line = reader.readLine().trim();

		int k;

		try {

			k = (line.length() == 0) ? 0 : Integer.parseInt(line) - 1;

		} catch (NumberFormatException e) {

			System.out.println("KeyStore not changed");

			return;

		}



		X509Certificate cert = chain[k];

		String alias = host + "-" + (k + 1);

		ks.setCertificateEntry(alias, cert);



		OutputStream out = new FileOutputStream(alina);

		ks.store(out, passphrase);

		out.close();



		System.out.println();

		System.out.println(cert);

		System.out.println();

		System.out

				.println("Added certificate to keystore '"+alina+"' using alias '"

						+ alias + "'");

	}



	private static final char[] HEXDIGITS = "0123456789abcdef".toCharArray();



	private static String toHexString(byte[] bytes) {

		StringBuilder sb = new StringBuilder(bytes.length * 3);

		for (int b : bytes) {

			b &= 0xff;

			sb.append(HEXDIGITS[b >> 4]);

			sb.append(HEXDIGITS[b & 15]);

			sb.append(' ');

		}

		return sb.toString();

	}



	private static class SavingTrustManager implements X509TrustManager {



		private final X509TrustManager tm;

		private X509Certificate[] chain;



		SavingTrustManager(X509TrustManager tm) {

			this.tm = tm;

		}



		public X509Certificate[] getAcceptedIssuers() {

			throw new UnsupportedOperationException();

		}



		public void checkClientTrusted(X509Certificate[] chain, String authType)

				throws CertificateException {

			throw new UnsupportedOperationException();

		}



		public void checkServerTrusted(X509Certificate[] chain, String authType)

				throws CertificateException {

			this.chain = chain;

			tm.checkServerTrusted(chain, authType);

		}

	}



}

之后每次请求之前都加上(我也不知道是不是每次都要加,还是只要第一次设置就好)

System.setProperty("javax.net.ssl.trustStore", "E:/jdk1.7.0_21/jre/lib/security/jssecacerts");

这样应该就可以成功发送请求了
ps:要是自己的网站没弄证书,chrome浏览器还是会失败的,要在chrome的快捷方式目标栏后面加上--ignore-certificate-errors即可

孟子E章 2018-07-07

打赏
举报

json格式的可以使用jsonp的方法，但这里不是
如果服务器没有设置
response.addHeader( "Access-Control-Allow-Origin", "*" );
则js无法实现跨域。
这种情况下，你只能在你的服务器端使用后台代码请求，再返回到前端

ambit_tsai-微信 2018-07-07

打赏
举报

是浏览器的安全策略导致，ajax跨域需要服务器在响应头部加上Access-Control-Allow-Origin配置。
或者利用jsonp也可以实现跨域，但是既然你说这个接口是别人的，修改不了。
那么只能通过服务器端代理实现跨域了

Ajax访问接口，提示已拦截跨源请求：同源策略禁止读取位于。。。

相关推荐