search

o-d-i-n / HelloWorld

Open Development Initiative - NSIT Web Platform
MIT License
16 stars 7 forks source link

Access-Control-Allow-Origin #11

Open prabhakar267 opened 7 years ago

prabhakar267 commented 7 years ago

XMLHttpRequest cannot load https://nsitod.in/api/members/. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8000' is therefore not allowed access. @mbad0la @ab-decoded

prabhakar267 commented 7 years ago

I found something, this can be used https://github.com/ottoyiu/django-cors-headers

mbad0la commented 7 years ago

@ab-decoded please confirm on this. Would it be safe to enable cors, considering that we don't have any sensitive data as such?

mbad0la commented 7 years ago

@prabhakar267 would you like to initiate a PR if @ab-decoded is fine with this?

prabhakar267 commented 7 years ago

@mbad0la sure!

mbad0la commented 7 years ago

Let's keep this on hold, considering we need to build authorisation soon.