CORS Problem in localhost development

nikolilama · November 28, 2019, 9:50pm

Hi! I’m doing an app with meteor, and i use google maps api. But i have a problem with CORS. I don’t wanna use firefox plugin or chrome plugin for enable CORS because it will be the same problem on mobile. How can i resolve CORS problem with meteor ?

PS: I develop on my localhost

Thank You!

rjdavid · November 29, 2019, 1:15am

github.com

meteor/meteor/blob/devel/packages/browser-policy/README.md

# browser-policy
[Source code of released version](https://github.com/meteor/meteor/tree/master/packages/browser-policy) | [Source code of development version](https://github.com/meteor/meteor/tree/devel/packages/browser-policy)
***

The `browser-policy` family of packages, part of
[Webapp](https://github.com/meteor/meteor/tree/master/packages/webapp), lets you set security-related
policies that will be enforced by newer browsers. These policies help
you prevent and mitigate common attacks like cross-site scripting and
clickjacking.

## Details

When you add `browser-policy` to your app, you get default configurations for
the HTTP headers X-Frame-Options and Content-Security-Policy. X-Frame-Options
tells the browser which websites are allowed to frame your app. You should only
let trusted websites frame your app, because malicious sites could harm your
users with <a href="https://www.owasp.org/index.php/Clickjacking">clickjacking
attacks</a>.
<a href="https://developer.mozilla.org/en-US/docs/Security/CSP/Introducing_Content_Security_Policy">Content-Security-Policy</a>
tells the browser where your app can load content from, which encourages safe

This file has been truncated. show original

nikolilama · November 29, 2019, 5:23pm

Thanks @rjdavid i will try this package!