Indeed I did... to no great effect with the results... still spits out that it does not want to process an unsafe 'X-JSON' header...
On Wednesday, January 16, 2013 8:46:32 PM UTC-5, Jason wrote: > > > did you also set the headers in the Ajax.Request object to null > > ie > > new Ajax.Request('/your/url',{ 'requestHeaders' : { 'X-Requested-With' : > null, 'X-Prototype-Version' : null}}); > > Jason Westbrook | T: 313-799-3770 | jwest...@gmail.com <javascript:> > > > On Wed, Jan 16, 2013 at 5:42 PM, Dave Lazar <hunk...@gmail.com<javascript:> > > wrote: > >> I built that version of Prototype, with that pull request... and it did >> not fix that issue... sigh... since the actual CORS call works.. I will >> just ignore the browser errors Prototype is throwing... messes things up in >> the console.. but that is minor... >> >> Thanks >> >> >> On Wednesday, January 16, 2013 7:13:50 PM UTC-5, Jason wrote: >> >>> >>> In the latest DEV version hosted on github you can remove the X-* HTTP >>> headers that PrototypeJS puts into the AJAX requests that make the CORS >>> pre-flight requests fail. >>> >>> >>> Check out this pull request >>> >>> https://github.com/**sstephenson/prototype/pull/88<https://github.com/sstephenson/prototype/pull/88> >>> >>> >>> Jason Westbrook | T: 313-799-3770 | jwest...@gmail.com >>> >>> >>> On Wed, Jan 16, 2013 at 2:43 PM, Dave Lazar <hunk...@gmail.com> wrote: >>> >>>> Chrome, Firefox and Safari all show a console error. They also all show >>>> the response. Puzzling... >>>> >>>> >>>> >>>> On Wednesday, January 16, 2013 5:22:36 PM UTC-5, Shane McCarron wrote: >>>> >>>>> are you using Chrome by any chance? I noticed that it complains about >>>>> some other headers I try to set in the same way. >>>>> >>>>> On Wed, Jan 16, 2013 at 4:21 PM, Dave Lazar <hunk...@gmail.com> wrote: >>>>> >>>>>> As I mentioned... this a CORS setup, so obviously it is cross-site. >>>>>> That part of the stack works perfect, and the response is indeed dished >>>>>> out >>>>>> to the browser as expected. The only problem I have is Prototype not >>>>>> liking the header... I am looking for the tip that will silence that... >>>>>> >>>>>> Thanks >>>>>> >>>>>> >>>>>> On Wednesday, January 16, 2013 5:12:43 PM UTC-5, DaveK wrote: >>>>>>> >>>>>>> is the page served from http://test.heroku.com ? >>>>>>> >>>>>>> If not, it's a cross-site scripting security issue. >>>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Prototype & script.aculo.us" group. >>>>>> To view this discussion on the web visit https://groups.google.com/d/ >>>>>> **ms**g/prototype-scriptaculous/-/**xc**Pk0scKJdkJ<https://groups.google.com/d/msg/prototype-scriptaculous/-/xcPk0scKJdkJ> >>>>>> . >>>>>> >>>>>> To post to this group, send email to prototype-s...@**googlegroups.** >>>>>> com. >>>>>> >>>>>> To unsubscribe from this group, send email to >>>>>> prototype-scriptaculous+**unsubs**cr...@googlegroups.com. >>>>>> For more options, visit this group at http://groups.google.com/** >>>>>> group**/prototype-scriptaculous?**hl=en<http://groups.google.com/group/prototype-scriptaculous?hl=en> >>>>>> **. >>>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> Shane McCarron >>>>> halin...@gmail.com >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Prototype & script.aculo.us" group. >>>> To view this discussion on the web visit https://groups.google.com/d/** >>>> msg/prototype-scriptaculous/-/**LOcfGBnKHXgJ<https://groups.google.com/d/msg/prototype-scriptaculous/-/LOcfGBnKHXgJ> >>>> . >>>> >>>> To post to this group, send email to prototype-s...@**googlegroups.com. >>>> To unsubscribe from this group, send email to prototype-scriptaculous+* >>>> *unsubscr...@googlegroups.com. >>>> For more options, visit this group at http://groups.google.com/** >>>> group/prototype-scriptaculous?**hl=en<http://groups.google.com/group/prototype-scriptaculous?hl=en> >>>> . >>>> >>> >>> -- >> You received this message because you are subscribed to the Google Groups >> "Prototype & script.aculo.us" group. >> To view this discussion on the web visit >> https://groups.google.com/d/msg/prototype-scriptaculous/-/pcg4MZ0tctgJ. >> >> To post to this group, send email to >> prototype-s...@googlegroups.com<javascript:> >> . >> To unsubscribe from this group, send email to >> prototype-scriptaculous+unsubscr...@googlegroups.com <javascript:>. >> For more options, visit this group at >> http://groups.google.com/group/prototype-scriptaculous?hl=en. >> > > -- You received this message because you are subscribed to the Google Groups "Prototype & script.aculo.us" group. To view this discussion on the web visit https://groups.google.com/d/msg/prototype-scriptaculous/-/QlngtF0Su_MJ. To post to this group, send email to prototype-scriptaculous@googlegroups.com. To unsubscribe from this group, send email to prototype-scriptaculous+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/prototype-scriptaculous?hl=en.