【发布时间】:2020-01-09 11:15:11
【问题描述】:
我试图只允许某些域访问源。当我插入时
Header Set Access-Control-Allow-Origin "domain.tld" 完美运行。
当我为多个域尝试它时,它会相反。它允许任何域但不允许cors.domain.tld:
<VirtualHost *:80>
ProxyPreserveHost On
ProxyRequests Off
ProxyPass / http://localhost:9090/
ProxyPassReverse / http://localhost:9090/
ServerName map.domain.tld
ServerAlias map.domain.tld
<Proxy *>
SetEnvIf Origin "http(s)?://(www\.)?(cors.domain.tld|staging.google.com)$" AccessControlAllowOrigin=$0
Header add Access-Control-Allow-Origin %{AccessControlAllowOrigin}e env=AccessControlAllowOrigin
Header merge Vary Origin
Order allow,deny
Allow from all
</Proxy>
</VirtualHost>
我做错了什么?
谢谢!
【问题讨论】:
标签: apache proxy cors access-control