Fix CORS block request with new Chrome update
Budget: €30 – €250 EUR
With new Chrome version our application doesn't work. Our web application send get request to localhost and now Chrome block this request.
The security problem is described at:
https://wicg.github.io/private-network-access/
The Chrome error showed in developer tools is:
Access to XMLHttpRequest at 'http://127.0.0.1/connector//xxxxxxxxxxxx from origin 'http://www.xxxxxxx.xxx' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space `local`.
Ideas to fix:
1. Some header in the local web app (chrome://flags/#block-insecure-private-network-requests solutions is not valid because we have a lot of users)
2. The current local web app is runing on XAMPP, may be we can convert to desktop web app with bitnami or some javascript web app framework
The security problem is described at:
https://wicg.github.io/private-network-access/
The Chrome error showed in developer tools is:
Access to XMLHttpRequest at 'http://127.0.0.1/connector//xxxxxxxxxxxx from origin 'http://www.xxxxxxx.xxx' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space `local`.
Ideas to fix:
1. Some header in the local web app (chrome://flags/#block-insecure-private-network-requests solutions is not valid because we have a lot of users)
2. The current local web app is runing on XAMPP, may be we can convert to desktop web app with bitnami or some javascript web app framework