Box-content-preview, how to allow all origins? (CORS Domains)

回答済み

フォローする

新規投稿

Dev360

• 2017年12月01日 06:59

We are currently migrating from Crocodoc to the new Box View (using the box-content-preview lib). We are having some problems with the CORS domains of the app.

 

Problem 1: the field "CORS domains" does not save properly if we try to save it with an empty value. As seen on the screenshot, a "Successfully updated the app." popup appears, yet if I reload the page the urls previously saved are still there.

 

 

Problem 2: our customers can use a white-label version of our platform with a custom url, therefore we cannot list all the allowed origins. How do we allow all origins?

 

 

 

0

• 

  Dev360

  • 2017年12月05日 01:47

  I created a support ticket, and it's not possible. 

   

  We'll use embedLink.

  0

  コメントアクション パーマリンク
• 

  atriumdan

  • 2017年12月06日 18:07

  You can use wildcards.

  0

  コメントアクション パーマリンク
• 

  dwaites

  • 2017年12月19日 14:10

  Do you have a link for docs on how the wildcards would work?

  0

  コメントアクション パーマリンク
• 

  tonyjin

  • 2017年12月20日 16:20

  Wildcards are only supported for subdomains I believe, e.g. https://*.foo.com. We're working on a different CORS solution that defaults to allowing all traffic, but don't have an ETA yet.

  0

  コメントアクション パーマリンク
• 

  richardtallent

  • 2019年02月18日 08:56

  Any news on this?
  
  I'm evaluating Box for an application for a client who uses Box, and we would need the ability to set the Access-Control-Allow-Origin: null to allow a local HTML file (not server-hosted) to make requests. I believe "*" would work as well, since we're sending tokens, not credentials.
  
  Local HTML applications may be unusual, but they are a low-cost, simple solution for a client who has a small team who need access a simple, cross-platform application (mixed Windows/Mac environment). They have no budget to deal with the red tape of getting web hosting approved through their own IT department, and they have the same issue if we were to try to create a traditional desktop app. But they do use Box, so Box would be a great place to load and store the data the app needs.

  0

  コメントアクション パーマリンク
• 

  testerjoncloud

  • 2019年05月22日 20:13

  Seconded. When is this feature going to be allowed?

  0

  コメントアクション パーマリンク

サインインしてコメントを残してください。