Error Request header field X-Requested-With is not allowed by Access-Control-Allow-Headers

Question

I have a simple PHP script that I am attempting a cross-domain CORS request:

<?php
header("Access-Control-Allow-Origin: *");
header("Access-Control-Allow-Headers: *");
...

Yet I still get the error:

Request header field X-Requested-With is not allowed by Access-Control-Allow-Headers

Anything I'm missing?

Answer 1

Hello @kartik,

Access-Control-Allow-Headers does not allow * as accepted value.

Instead of the asterisk, you should send the accepted headers (first X-Requested-With as the error says).

Hope it helps!!

Thank You!!