I have a "DOM" file that calls an ASP file (NOT .NET) on another domain.
How do I write the Access-Control-Allow-Origin in ASP?
Access-Control-Allow-Origin is for "PHP" but I cant find the syntax for ASP, I can only find it for ASP.NET
It works fine when I use Internet Explorer but in Chrome it says
"No
Access-Control-Allow-Originheader is present on the requested resource. Origin 'http://SOURCEDOMAIN' is therefore not allowed access."
Adding HTTP headers into a Classic ASP is a trivial process, the Response object has a method specifically for this purpose that allows you to add any custom header you want into the HTTP Headers that will be sent to the browser when the page is requested.
The method is called AddHeader() here is an example;
<%
Call Response.AddHeader("Access-Control-Allow-Origin", "http://SOURCEDOMAIN")
%>
<% %>). The header should contain the matching URL domain for the page that is trying to access the Classic ASP page in the background. If Chrome says no header is present then you have either added the code to the wrong page or some proxy is removing the header before it get's to the client browser.
I don't know if browser security has increased over the years, but in order for it to work I had to add the header: Access-Control-Allow-Credentials
So here's the solution that worked for me :
<%
Call Response.AddHeader("Access-Control-Allow-Origin", "http://SOURCEDOMAIN")
Call Response.AddHeader("Access-Control-Allow-Credentials", "true")
%>
Response.AddHeader "Access-Control-Allow-Origin", "http://SOURCEDOMAIN".<head>tag is not the same thing. HTTP headers are added by the server when the page is requested, the example I give below is code that should be added to the Classic ASP that you are trying to access in the background, this will enable CORS and stop Chrome blocking the content.