How to add Access-Control-Allow-Origin headers to yaws file?

Question

I send a post request to YAWS server using AJAX from a different port/domain but javascript returns this error message:

XMLHttpRequest cannot load http://0.0.0.0:8000/index.yaws. Origin http://localhost is not allowed by Access-Control-Allow-Origin.

Now I understand that I need to include CORS headers in index.yaws file but I don't know how to do it in Erlang.

out(Arg)-> {html, string}. string is json encoded line which should return some mysql data. — , May 11 '16 at 14:02
Thanks. Next question: is there some particular set of origins you want to allow? Or is it just `localhost`? — Steve Vinoski, May 11 '16 at 14:11

score 1 · Accepted Answer · answered May 11 '16 at 20:18

If you want to set only localhost as an allowed origin you could try the code below. Note that it represents the JSON results you currently return with the variable YourJsonString.

out(Arg) ->
    Hdrs = yaws_api:arg_headers(Arg),
    case yaws_api:get_header(Hdrs, "Origin") of
        "localhost" ->
            [{header, {"Access-Control-Allow-Origin", "localhost"}},
             {html, YourJsonString}];
        _ ->
            {html, YourJsonString}
    end.

How to add Access-Control-Allow-Origin headers to yaws file?

1 Answers1