Reason: CORS disabled

您正在阅读此内容的英文版本，因为该语系尚未翻译。 帮助我们翻译此文章吧！

原因

原因：CROS被禁用

哪里错了？

发送了一个需要使用CORS的请求，但在用户的浏览器中禁用了CORS。发生这种情况时，用户需要在浏览器中重新打开CORS。

在Firefox中，禁用CORS的首选项是content.cors.disable。将此设置为true将禁用CORS，因此在这种情况下，CORS请求将始终因此错误而失败。

参见

相关主题
  1. HTTP
  2. Guides:
  3. Resources and URIs
    1. Identifying resources on the Web
    2. Data URIs
    3. Introduction to MIME Types
    4. Complete list of MIME Types
    5. Choosing between www and non-www URLs
  4. HTTP guide
    1. Basics of HTTP
    2. Overview of HTTP
    3. Evolution of HTTP
    4. HTTP Messages
    5. A typical HTTP session
    6. Connection management in HTTP/1.x
    7. Protocol upgrade mechanism
  5. HTTP security
    1. Content Security Policy (CSP)
    2. HTTP Public Key Pinning (HPKP)
    3. HTTP Strict Transport Security (HSTS)
    4. Cookie security
    5. X-Content-Type-Options
    6. X-Frame-Options
    7. X-XSS-Protection
    8. Mozilla web security guidelines
    9. Mozilla Observatory
  6. HTTP access control (CORS)
  7. HTTP authentication
  8. HTTP caching
  9. HTTP compression
  10. HTTP conditional requests
  11. HTTP content negotiation
  12. HTTP cookies
  13. HTTP range requests
  14. HTTP redirects
  15. HTTP specifications
  16. Feature policy
  17. References:
  18. HTTP headers
    1. Accept
    2. Accept-Charset
    3. Accept-Encoding
    4. Accept-Language
    5. Accept-Patch [我来译!]
    6. Accept-Ranges
    7. Access-Control-Allow-Credentials
    8. Access-Control-Allow-Headers
    9. Access-Control-Allow-Methods
    10. Access-Control-Allow-Origin
    11. Access-Control-Expose-Headers
    12. Access-Control-Max-Age
    13. Access-Control-Request-Headers
    14. Access-Control-Request-Method
    15. Age
    16. Allow
    17. Alt-Svc
    18. Authorization
    19. Cache-Control
    20. Clear-Site-Data
    21. Connection
    22. Content-Disposition
    23. Content-Encoding
    24. Content-Language
    25. Content-Length
    26. Content-Location
    27. Content-Range
    28. Content-Security-Policy
    29. Content-Security-Policy-Report-Only
    30. Content-Type
    31. Cookie
    32. Cookie2
    33. Cross-Origin-Resource-Policy
    34. DNT
    35. Date
    36. ETag
    37. Early-Data
    38. Expect
    39. Expect-CT
    40. Expires
    41. Feature-Policy
    42. Forwarded
    43. From
    44. Host
    45. If-Match
    46. If-Modified-Since
    47. If-None-Match
    48. If-Range
    49. If-Unmodified-Since
    50. Index [我来译!]
    51. Keep-Alive
    52. Large-Allocation
    53. Last-Modified
    54. Location
    55. Origin
    56. Pragma
    57. Proxy-Authenticate
    58. Proxy-Authorization
    59. Public-Key-Pins
    60. Public-Key-Pins-Report-Only
    61. Range
    62. Referer
    63. Referrer-Policy
    64. Retry-After
    65. Save-Data [我来译!]
    66. Sec-WebSocket-Accept
    67. Server
    68. Server-Timing [我来译!]
    69. Set-Cookie
    70. Set-Cookie2
    71. SourceMap
    72. HTTP Strict Transport Security
    73. TE
    74. Timing-Allow-Origin
    75. Tk
    76. Trailer
    77. Transfer-Encoding
    78. Upgrade-Insecure-Requests
    79. 用户代理
    80. Vary
    81. Via
    82. WWW-Authenticate
    83. Warning
    84. X-Content-Type-Options
    85. DNS 预读取
    86. X-Forwarded-For
    87. X-Forwarded-Host
    88. X-Forwarded-Proto
    89. X-Frame-Options 响应头
    90. X-XSS-Protection
  19. HTTP request methods
    1. CONNECT
    2. DELETE
    3. GET
    4. HEAD
    5. OPTIONS
    6. PATCH
    7. POST
    8. PUT
    9. TRACE
  20. HTTP response status codes
    1. 100 Continue
    2. 101 Switching Protocol
    3. 200 OK
    4. 201 Created
    5. 202 Accepted
    6. 203 Non-Authoritative Information
    7. 204 No Content
    8. 205 Reset Content
    9. 206 Partial Content
    10. 300 Multiple Choices
    11. 301 Moved Permanently
    12. 302 Found
    13. 303 See Other
    14. 304 Not Modified
    15. 307 Temporary Redirect
    16. 308 Permanent Redirect
    17. 400 Bad Request
    18. 401 Unauthorized
    19. 403 Forbidden
    20. 404 Not Found
    21. 405 Method Not Allowed
    22. 406 Not Acceptable
    23. 407 Proxy Authentication Required
    24. 408 Request Timeout
    25. 409 Conflict
    26. 410 Gone
    27. 411 Length Required
    28. 412 Precondition Failed（先决条件失败）
    29. 413 Payload Too Large
    30. 414 URI Too Long
    31. 415 Unsupported Media Type
    32. 416 Range Not Satisfiable
    33. 417 Expectation Failed
    34. 418 I'm a teapot
    35. 422 Unprocessable Entity
    36. 425 Too Early
    37. 426 Upgrade Required
    38. 428 Precondition Required
    39. 429 Too Many Requests
    40. 431 Request Header Fields Too Large
    41. 451 Unavailable For Legal Reasons
    42. 500 内部服务器错误
    43. 501 Not Implemented
    44. 502 Bad Gateway
    45. 503 Service Unavailable
    46. 504 Gateway Timeout
    47. 505 HTTP Version Not Supported
    48. 511 Network Authentication Required
  21. CSP directives
    1. CSP: base-uri
    2. CSP: block-all-mixed-content
    3. CSP: child-src [我来译!]
    4. CSP: connect-src
    5. CSP: default-src
    6. CSP: font-src
    7. CSP: form-action [我来译!]
    8. CSP: frame-ancestors
    9. CSP: frame-src [我来译!]
    10. CSP: img-src [我来译!]
    11. CSP: manifest-src [我来译!]
    12. CSP: media-src [我来译!]
    13. CSP: object-src [我来译!]
    14. CSP: plugin-types [我来译!]
    15. CSP: referrer [我来译!]
    16. CSP: report-uri [我来译!]
    17. CSP: require-sri-for
    18. CSP: sandbox [我来译!]
    19. CSP: script-src [我来译!]
    20. CSP: style-src [我来译!]
    21. CSP: upgrade-insecure-requests
    22. CSP: worker-src [我来译!]
    23. report-to
  22. CORS errors
    1. Reason: CORS disabled
    2. Reason: CORS header 'Access-Control-Allow-Origin' does not match 'xyz' [我来译!]
    3. Reason: CORS header 'Access-Control-Allow-Origin' missing
    4. Reason: CORS header ‘Origin’ cannot be added
    5. Reason: CORS preflight channel did not succeed
    6. Reason: CORS request did not succeed
    7. Reason: CORS request external redirect not allowed
    8. Reason: CORS request not HTTP
    9. Reason: Credential is not supported if the CORS header ‘Access-Control-Allow-Origin’ is ‘*’ [我来译!]
    10. Reason: Did not find method in CORS header ‘Access-Control-Allow-Methods’ [我来译!]
    11. Reason: Multiple CORS header 'Access-Control-Allow-Origin' not allowed [我来译!]
    12. Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’ [我来译!]
    13. Reason: invalid token ‘xyz’ in CORS header ‘Access-Control-Allow-Headers’ [我来译!]
    14. Reason: invalid token ‘xyz’ in CORS header ‘Access-Control-Allow-Methods’ [我来译!]
    15. Reason: missing token ‘xyz’ in CORS header ‘Access-Control-Allow-Headers’ from CORS preflight channel [我来译!]
  23. Feature-Policy directives
    1. Feature-Policy: autoplay [我来译!]
    2. Feature-Policy: camera [我来译!]
    3. Feature-Policy: display-capture [我来译!]
    4. Feature-Policy: encrypted-media [我来译!]
    5. Feature-Policy: fullscreen [我来译!]
    6. Feature-Policy: geolocation [我来译!]
    7. Feature-Policy: microphone [我来译!]
    8. Feature-Policy: midi [我来译!]
    9. Feature-Policy: payment [我来译!]
    10. Feature-Policy: vr [我来译!]
    11. document-domain [我来译!]