I-VPN ayikwazi ukucisha i-CORS, ishintsha impendulo

Qala ngokuhlukanisa izinto ezimbili ezashintsha ngesikhathi esisodwa: indlela yenethiwekhi nokusetshenziswa kwesiphequluli. I-VPN ishintsha ikheli lokuphuma; ayishintshi imvelaphi yekhasi, eyakhiwe ngesikimu, ingqalabhoji kanye nembobo. Uma isicelo manje siphumelela, kukhona okushintshile empendulweni, noma isicelo ngokwaso sashintsha. Ukuthola ukuthi yikuphi umsebenzi wophenyo lonke.

I-CORS iyiphrothokholi yezihloko esetshenziswa isiphequluli, ngakho akukho lutho endleleni yenethiwekhi olungayicisha.

Imvelaphi ayilona ikheli le-IP

Imvelaphi isikimu, ingqalabhoji nembobo. Akulona ikheli amaphakethe aphuma kulo, futhi akulona i-IP iseva elibonayo. Yingakho i-VPN ingashintsha yonke ikheli elibonakalayo futhi ishiye imvelaphi injalo. Isiphequluli siqhathanisa i-Access-Control-Allow-Origin yempendulo nemvelaphi yekhasi, futhi ikheli lokuphuma alingeni kuleso siqhathaniso nakancane.

Ngakho isengezo noma i-proxy ebonakala ilungisa iphutha le-CORS yenza okunye: ibhala kabusha izihloko, noma ihambisa isicelo ukuze singabi seyimvelaphi ehlukile. Akukho kokubili okuyisici se-VPN.

Okuthunyelwa yisiphequluli ngempela

Esicelweni semvelaphi ehlukile esingelula, isiphequluli siqale sithumele ukuhlolwa kwangaphambili OPTIONS, okuthwala indlela nezihloko okuhlosiwe. Iseva kufanele iphendule ngezimvume ezizivumayo, futhi isicelo sangempela silandela kuphela uma leyo mpendulo ihlangabezana nemithetho. I-VPN ishintsha indlela ethwala zombili izingxoxo futhi ingashintsha okuphendulwa yizinsizakalo eziphakathi. Ayishintshi uchungechunge lwemvelaphi noma isidingo sokuhlolwa kwangaphambili.

Ikliyenti yomugqa womyalo ngokuvamile ayibonisi lutho kwalokho. Ingase ingathumeli isihloko se-Origin, ivamise ukweqa ukuhlolwa kwangaphambili, futhi ingase ithwale ubufakazi obuhlukile. Umzimba obuyiselwa ku-curl ufakazela ukuthi iseva iphendule i-curl.

Thola impendulo eyashintsha

Qhathanisa impendulo yangempela kuyo yonke indlela, hhayi ikhodi yesimo kuphela. Bheka izihloko ezithwala izimvume ze-CORS, uhlobo lwokuqukethwe, noma yikuphi ukuqondiswa kabusha, nokuthi ingabe uhlobo lwe-WAF noma lwe-CDN lwakhiqize ikhasi elihlukile. Ukwenqatshwa kwesifunda, ukuqondiswa kabusha kokuqinisekisa noma ikhasi lephutha elingenaso isihloko semvume—konke kwehluleka esipheqululini kuyilapho kubonakala njengephutha le-CORS. Leyo yimehluko yendlela yokuletha, futhi yiyo okufanele ibhalwe phansi.

Qopha izihloko zempendulo kuzo zombili izindlela futhi uzixoxe umugqa ngomugqa. Uma umehluko kuphela kuwukuntuleka kwe-Access-Control-Allow-Origin ekhasini elilodwa lephutha, utholile imbangela.

Lungisa insizakalo, hhayi ukusetshenziswa

Uma insizakalo ingeyakho, isho ngokusobala imvelaphi evunyelwe nezici zesicelo, bese ufunda amaphutha akhiqizwa yingxenye yangaphambili kanye nabadluliseli bayo. Uma ungakwenzi, thumela kumnikazi wensizakalo isiqhathaniso esihlanzekile. Ungalokothi ufake amakhukhi, izihloko zokugunyaza noma ukuthunyelwa kweseshini kuleyo mbiko, ngoba yilokho ubufakazi okuyinqubomgomo ekhona ukuze ibuvikele.

Gwema izengezo zesiphequluli ezicisha i-CORS. Zishintsha umngcele wokuphepha kuyilapho zifihla umehluko wempendulo okwakufanele uchazwe, futhi zishiya ukwehluleka okufanayo kubo bonke abanye abasebenzisi.

Qopha zombili izimpendulo, imvelaphi esetshenzisiwe kanye nendlela ethathiwe. Lowo mbhalo uguqula udumo lwe-VPN lube iphutha lensizakalo.