Home/ Questions/Q 8098967
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-05T22:15:00+00:00

I’m trying to call a WCF service cross-domain using javascript, over http. I’ve added

  • 0

I’m trying to call a WCF service cross-domain using javascript, over http.

I’ve added the Access-Control-Allow-Origin header to the operation I want to call like so:

WebOperationContext.Current.OutgoingResponse.Headers.Add("Access-Control-Allow-Origin", "*");

However when I post using jquery.ajax I get:

Origin http://server/ is not allowed by Access-Control-Allow-Origin.

What’s worse is it even happens from my local machine:

XMLHttpRequest cannot load http://localhost:8201/wcfservice. Origin http://localhost/ is not allowed by Access-Control-Allow-Origin. (observed in Chrome)

am I doing something fundamentally wrong?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    What you’re doing is fine for GET requests (in CORS-enabled browsers) – the request is sent to the service, and the browser will let it back to the application if the service has the Access-Control-Allow-Origin header).

    For “unsafe” requests (i.e., those which can potentially cause side effects in the service, such as POST, PUT and DELETE), the browser first sends a preflight request, an OPTIONS request which “asks” the service whether it can accept a cross-domain request. Since your operation only responds to POST requests, it won’t respond to that request and the browser will block it.

    I wrote a post about one way of implementing CORS support in WCF, you can find it at http://blogs.msdn.com/b/carlosfigueira/archive/2012/05/15/implementing-cors-support-in-wcf.aspx. Basically, you’ll need to handle the OPTIONS requests as well, in addition to the “normal” requests.

    • 0