"SHSI Certificate of Recognition"
"SHSI Certificate of Recognition"
"Best on the Web"
"Best on the Web"


Encyclopedia Dubuque

www.encyclopediadubuque.org

"Encyclopedia Dubuque is the online authority for all things Dubuque, written by the people who know the city best.”
Marshall Cohen—researcher and producer, CNN

Affiliated with the Local History Network of the State Historical Society of Iowa, and the Iowa Museum Association.




MediaWiki:Apihelp-main-param-crossorigin

From Encyclopedia Dubuque
Jump to navigation Jump to search

When accessing the API using a cross-domain AJAX request (CORS) and using a session provider that is safe against cross-site request forgery (CSRF) attacks (such as OAuth), use this instead of origin=* to make the request authenticated (i.e., not logged out). This must be included in any pre-flight request, and therefore must be part of the request URI (not the POST body).

Note that most session providers, including standard cookie-based sessions, do not support authenticated CORS and cannot be used with this parameter.