Solving Same Origin Policy Problem (or cross-site script)


"Same Origin Policy" is a security restriction for client (browser)-side scripting. (Read: http://en.wikipedia.org/wiki/Same_origin_policy). This policy make JS development tricky in developer's local machine. Here is how to solve the problem.  Helpful links are:

How to

  1. install apache httpd to your local
  2. install "proxy.cgi" to your local (download at http://trac.openlayers.org/browser/trunk/openlayers/examples/proxy.cgi)
    1. CGI script is in python. You may need to install python and change the header of the CGI script
  3. Test "proxy.cgi" by accessing http://localhost/proxy.cgi
    1. If proxy.cgi shows openlayers home page, it's working.
  4. Edit proxy.cgi to add the our geoserver host
    1. Add your geoserver host name to allowedHosts list
  5. Add the line as below to your JS
    1. OpenLayers.ProxyHost = "/cgi-bin/proxy.cgi?url=";
  • No labels