este é um problema com o Nginx que afeta apenas o Firefox. Eu tenho essa configuração:
link
upstream connect {
server 127.0.0.1:8080;
}
server {
server_name admin.example.com www.admin.example.com;
listen 80;
return 301 https://admin.example.com$request_uri;
}
server {
listen 80;
server_name ankieta.example.com www.ankieta.example.com;
add_header Access-Control-Allow-Origin $http_origin;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, PATCH, DELETE';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Headers' 'Access-Control-Request-Method,Access-Control-Request-Headers,Cache,Pragma,Authorization,Accept,Accept-Encoding,Accept-Language,Host,Referer,Content-Length,Origin,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
return 301 https://ankieta.example.com$request_uri;
}
server {
server_name admin.example.com;
listen 443 ssl;
ssl_certificate /srv/ssl/14182263.pem;
ssl_certificate_key /srv/ssl/admin_i_ankieta.example.com.key;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM;
location / {
proxy_pass http://connect;
}
}
server {
server_name ankieta.example.com;
listen 443 ssl;
ssl_certificate /srv/ssl/14182263.pem;
ssl_certificate_key /srv/ssl/admin_i_ankieta.example.com.key;
ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM;
root /srv/limesurvey;
index index.php;
add_header 'Access-Control-Allow-Origin' $http_origin;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS, PUT, PATCH, DELETE';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Headers' 'Access-Control-Request-Method,Access-Control-Request-Headers,Cache,Pragma,Authorization,Accept,Accept-Encoding,Accept-Language,Host,Referer,Content-Length,Origin,DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';
client_max_body_size 4M;
location / {
try_files $uri $uri/ /index.php?q=$uri&$args;
}
location ~ /*.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
#NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME /srv/limesurvey$fastcgi_script_name;
# fastcgi_param HTTPS $https;
fastcgi_intercept_errors on;
fastcgi_pass 127.0.0.1:9000;
}
location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
expires max;
log_not_found off;
}
}
este é basicamente um aplicativo AngularJS e um aplicativo PHP (LimeSurvey), servido em dois domínios diferentes pelo mesmo servidor da web (Nginx). O AngularJS é, na verdade, servido pelo ConnectJS, que é representado pelo Nginx (o ConnectJS ouve apenas o localhost).
No console do Firefox, recebo isso:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading
the remote resource at
https://ankieta.example.com/admin/remotecontrol. This can be fixed by
moving the resource to the same domain or enabling CORS.
que, claro, é irritante.
Outros navegadores funcionam bem (Chrome, IE).
Alguma sugestão sobre isso?