configure openerp server for cross domain

Question

Hi, I am using OpenERP V7 with Ubuntu.

following the guide : https://github.com/vaab/js-oe-json [1]  to work with openERP using Jquery, I saw:

"You can force your openerp server to set these headers thanks to apache when used in proxy mode by adding these in your apache configuration:"

Header set Access-Control-Allow-Origin "*"
Header set Access-Control-Allow-Methods "POST, GET, OPTIONS"
Header set Access-Control-Allow-Headers "origin, content-type, accept"

To do so, does it means that I hav

Torsten Francke · Answer

The Script Access OpenERP per Javascript. In general no Browser allows calling Javascript to a different domain. This is a basic of security.
In some context it can be helpfull to have a way that other domains can execute Javascipt on your webside. This will be implemented in "Access-Control-Allow" HTTP Header.
In OpenERP you can not excess the HTTP Header, so he adds a apache as proxy. The installation is not part of the manuel.
*BUT: i recommend: don't do this becouse it breaks your security o

Relaterede indlæg	Besvarelser	Visninger
apache 502 proxy error after updating to 7th version Løst v7 apache 502error	1 dec. 23	70649
How to add a "Delete" button on the popup form? Løst v7	1 okt. 25	9233
Minimum Lot Charge For Sales Order Line Items v7	0 dec. 24	13486
Record Rule to allow a User to update their own Employee object without belonging to Officer group Løst v7	3 sep. 24	25470
How to activate the Technical Features? Løst v7	5 dec. 24	58663

Dette spørgsmål er blevet anmeldt

Kan du lide at diskutere? Læs ikke bare med, deltag aktivt i debatten!