Search Unity

Cross origin request Blocked!

Discussion in 'Web' started by nsmith1024, Aug 11, 2016.

  1. nsmith1024

    nsmith1024

    Joined:
    Mar 18, 2014
    Posts:
    870
    Hello,

    I have a Unity WebGL project that is using WWW to get a JPG picture from another website.

    Firefox is giving me this error:

    Cross-Origin Request Blocked The Same Origin Policy disallows reading the remote resource CORS header 'Access-Control-Allow-Origin' missing

    Anybody knows how can i solve this?

    Thanks
     
  2. alexsuvorov

    alexsuvorov

    Unity Technologies

    Joined:
    Nov 15, 2015
    Posts:
    327
    Hello nsmith1024.

    According to the browser security model, you can only access resources from another origin (i.e. from another domain or using a different protocol) if the resource server authorizes such a request (provides proper CORS response headers). There are following solutions that you might consider:

    1) If you are able to modify the resource server response headers, then you can just properly setup the resource server CORS to authorize your requests (http://docs.unity3d.com/Manual/webgl-networking.html)

    2) If you don't have access to the resource server headers, but you are able to create an html page on this resource server (i.e. dropbox, google drive), then you can embed it in a hidden iframe on the WebGL content page. Such an iframe will be able to download the resources using XMLHttpRequest and transfer them back to the WebGL application on the main page. You can use postMessage for page interaction and jslib plugin for interaction with the WebGL application (http://docs.unity3d.com/Manual/webgl-interactingwithbrowserscripting.html)

    3) If you are able to setup a proxy (i.e. a simple php or node.js proxy) on the server where your WebGL content is hosted, then you can just perform WWW requests through this proxy (actual cross-domain requests will be performed by the proxy, while browser only accesses a resource from the same domain). If the proxy is setup on another domain, then it should append proper CORS to the response (more info here http://forum.unity3d.com/threads/on...no-access-control-allow-origin-header.385628/)
     
    gresolio likes this.
  3. nsmith1024

    nsmith1024

    Joined:
    Mar 18, 2014
    Posts:
    870
    Thanks very much, i used a separate method to download the image from the other source