chrome extension: refuse header “date” in ajax request

Question

I have a javascript code to be used for api (ajax) and I need to send header \"date\" to api-server (required header), but chrome tells me \'refused to set unsafe header \"D

Answer 1

Its lame because if you use Firefox and the RestClient you can do it. But you can't if you use Chrome and the "Advanced Rest Client"

Answer 2

You can't. Since you are sending a XHR request it MUST be terminated according to the standard when you set a whole list of prohibited headers:

http://www.w3.org/TR/XMLHttpRequest2/#the-setrequestheader-method

You'll need to proxy through your originating url or some other work around.

Answer 3

Yeah Chrome must refuse your request because the standard says:

Terminate these steps if header is a match for one of the following headers: [...]

• Date

Reference: http://www.w3.org/TR/XMLHttpRequest/#the-setrequestheader-method