CORS

hej,

how I can remove the response header Access-Control-Allow-Origin? looks like the settings {'origins' : 'asfdasd.com'} does not work.

POST /socket.io/?EIO=3&transport=polling&t=1481690658797-5&sid=Dp18NNt_bWPkB4rGAAAP HTTP/1.1 Origin: https://evilhost.net

HTTP/1.1 400 Bad Request Content-Type: application/json Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://evilhost.net Date: Fri, 03 Feb 2017 12:27:42 GMT Connection: keep-alive Transfer-Encoding: chunked

[princefishthrower]

@thEpisode I realize this is an old thread, but that final link was what fixed it for me! Most of the Express tutorials have app.listen(...) but in the case of using socket.io you need to be sure that in your index.js you call http.listen(...) and NOT listen on the app object, or you’ll get this CORS issue. Such a small thing!

[thEpisode]

Problem resolved!! @Kenzku please review this documentation: https://github.com/socketio/socket.io/blob/master/docs/API.md#serveroriginsvalue and see the code: https://github.com/socketio/socket.io/blob/master/lib/index.js#L67 and check if you use Express (this example is very useful): https://github.com/socketio/socket.io#in-conjunction-with-express