So I was doing something like an embedded widget for our service, which 
offers a string like <script 
src="http://our-awesome-service.com/scripts/widget.js";></script> that users 
can take and embed on their own sites, blogs etc., and I encountered a 
problem that while trying to use the script to append a <link rel="import" 
href="http://our-awesome-service.com/templates/widget.html";> HTML import 
programatically on the user's site (say http://user-blog.com), the browser 
will show an access-control-allow-origin error saying that 
http://user-blog.com cannot access 
http://our-awesome-service.com/templates/widget.html

How do I handle this situation? Is it possible to only open CORS for this 
specific HTML file?

Follow Polymer on Google+: plus.google.com/107187849809354688692
--- 
You received this message because you are subscribed to the Google Groups 
"Polymer" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/polymer-dev/261a1826-7397-4bd3-b937-fc6a9f059c55%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to