Cross Domain Ajax Call in Atom Shell

Question

We are working with Atom Shell (Currently known as electron) to wrap a web application as desktop app and having trouble making cross domain ajax calls due to CORS restriction.

Answer 1

There are two problems here

CORS restrictions, which prevent the client from initiating a request, and the Access-Control-Allow-Origin header which is set by the server.

The first problem is solved as mentioned by setting the web-security options on the Browser-window object.

"webPreferences" : {
    "webSecurity" : false
},

The second issue whereby Electron actually sends 'file://' as the value of the Origin in the request does not have a solution as far as I can tell. Your options are to allow 'file://' or '*' in the Access-Control-Allow-Origin header (server side).

I have actually requested that setting the origin on requests be allowed but I suspect it will not get much traction.