Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to disable same origin policy Internet Explorer

Chrome allows us to disable the same origin policy, so we can test cross origin requests. I would like to know if there any possibility to do the same thing in IE

like image 964
alex.mironov Avatar asked Jan 06 '14 09:01

alex.mironov


People also ask

How do I disable referrer policy strict origin when cross-origin?

In Google Chrome, you can easily disable the same-origin policy of Chrome by running Chrome with the following command: [your-path-to-chrome-installation-dir]\chrome.exe --disable-web-security --user-data-dir . Make sure that all instances of Chrome are closed before you run the command.

Why does browser have the same-origin policy?

The same-origin policy is a critical security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin. It helps isolate potentially malicious documents, reducing possible attack vectors.


1 Answers

Yes you can set this in Internet Options: Go to the Security tab. For the current zone click the "Custom level..." button. In the next window, scroll about a third of the way down to "Miscellaneous > Access data sources across domains" and set it to "Enable". If the current zone is Internet, then you should add the site to the trusted and set this option for the trusted zone instead.

Note that this will effectively disable CORS and will not set the Origin header in the request.

If the resource your accessing requires authentication, you'll need to deal with this manually in the request or pre-authenticate yourself in your current browser session.

IE9 Access data sources across domains

like image 194
ianbeks Avatar answered Sep 23 '22 06:09

ianbeks