問(wèn)題描述
Chrome 一直工作到版本 73.現(xiàn)在它向我拋出了一個(gè) CORB 警告并阻止我的 chrome 擴(kuò)展程序運(yùn)行.
Chrome was working until version 73. Now it is throwing me a CORB warning and stopping my chrome extension from running.
這是我的ajax jquery代碼，沒(méi)什么特別的
Here is my ajax jquery code, nothing special
$.ajax({
url: this.url + "api/users",
type: 'get',
data: { account_id: this.account_id(), user_id: this.user_id(), person_id: person_id },
success: function (data) {
//do stuff
}
});
我確實(shí)注意到，如果我刪除 x-content-type-options 標(biāo)頭以使其不再顯示nosniff"，我可以返回一些 Ajax 請(qǐng)求，但不能返回其他請(qǐng)求.不確定這是否意味著什么，但我注意到返回?cái)?shù)組的 json 請(qǐng)求有效，但其他請(qǐng)求無(wú)效.
I did notice that if I remove the x-content-type-options header so that it no longer reads "nosniff" I can get some Ajax requests to be returned but not others. Not sure if this means anything but I noticed that the json requests that returned an array worked but others did not.
remove_keys = %w(X-Content-Type-Options)
response.headers.delete_if{|key| remove_keys.include? key}
[{'id' : '123'}] <-worked
{'id' : '123'} <- did not work (not sure if means anything)
來(lái)自 chrome 的完全錯(cuò)誤
Full error from chrome
Cross-Origin Read Blocking (CORB) blocked cross-origin response https://ideas.test/api/users?token=W9BDdoiKcXLWSHXWySnwdCV69jz2y&account_id=3098355&user_id=john%40gmail.com&person_id=21046915&sync=false&new=true with MIME type application/json. See https://www.chromestatus.com/feature/5629709824032768 for more details.
響應(yīng)的標(biāo)題
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: x-auth_token
Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
Access-Control-Allow-Origin: chrome-extension://mhikhjencpecbhelhjgdcgpdhlhdlhjh
Access-Control-Expose-Headers:
Access-Control-Max-Age: 1728000
請(qǐng)求標(biāo)頭
Provisional headers are shown
Accept: */*
Origin: chrome-extension://mhikhjencpecbhelhjgdcgpdhlhdlhjh
Referer: https://3.basecamp.com/
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36
如何在不通過(guò) chrome 刪除正文的情況下返回響應(yīng)正文?
How can I get the response body to be returned without chrome removing the body due to CORB?
推薦答案
我找到了解決方法.對(duì)某人來(lái)說(shuō)可能是矯枉過(guò)正，但我??花了 15 分鐘來(lái)解決所有問(wèn)題.在您的內(nèi)容腳本中，將所有 ajax 調(diào)用包裝到一個(gè)函數(shù)中:
I found a workaround. Might be an overkill for someone, but it took me 15 mins to fix everythiung. In your content script wrap all your ajax calls into a function:
將 ajaxGet 函數(shù)添加到您的內(nèi)容腳本中:
Add ajaxGet function to your content script:
function ajaxGet(data){
return new Promise(function (resolve, reject) {
chrome.runtime.sendMessage({action: 'ajaxGet', data: data}, function (response) {
console.log(response)
if(response&&!response.statusText){//Might need some work here
resolve(response);
} else {
reject(response)
}
});
});
}
然后在你的 background.js 中添加一個(gè)監(jiān)聽(tīng)器:
And in your background.js add a listener:
chrome.runtime.onMessage.addListener(function(request, sender, sendResponse) {
if(request.action=="ajaxGet"){
$.ajax(request.data).then(sendResponse,sendResponse)
return true //telling chrome to wait till your ajax call resolves
}
})
代替
$.ajax({
url: this.url + "api/user_boards",
type: 'get',
data: { account_id: this.account_id()}
})
打電話
ajaxGet({
url: this.url + "api/user_boards",
type: 'get',
data: { account_id: this.account_id()}
}).then(onSuccess, onError) //handle response from here
如果你不想在你的 background.js 中使用 jquery，你可以調(diào)用 Xhr.像這樣的:
If you don't want to use jquery in your background.js you can make Xhr call in stead. Something like this:
var data = JSON.stringify(false);
var xhr = new XMLHttpRequest();
xhr.withCredentials = true;
xhr.addEventListener("readystatechange", function () {
if (this.readyState === this.DONE) {
console.log(this.responseText);
sendResponse(this.responseText)
} else {
//handle errors
}
});
xhr.open("GET", request.data.url);
xhr.send(data);
您必須自己解決標(biāo)題.
這篇關(guān)于如何刪除 CORB 警告?的文章就介紹到這了，希望我們推薦的答案對(duì)大家有所幫助，也希望大家多多支持html5模板網(wǎng)！