django-cors-middleware 无效

Question

几天来我一直在尝试 django-cors-middleware，但我就是不知道如何设置它。
谁能告诉我我做错了什么？
下面是我正在使用的测试项目设置。

django-version: 1.10.3
python-version: 3.5.2
项目名称：cors_test
应用名称：appone

appone/urls.py

urlpatterns = [
    url(r'^$', views.test_cors, name='test_cors'),
]

appone/views.py

def test_cors(request):
    return render(request, 'appone/test.html', {})

appone/templates/appone/test.html

<html>
    <script type="text/javascript">

    var url = 'https://www.google.co.jp/?gfe_rd=cr&ei=BuxgWJ-_LIyL8QfIgYe4BQ';
    var xhr = new XMLHttpRequest();
    xhr.open('GET', url, true);

    xhr.onload = function() {
     var responseText = xhr.responseText;
     console.log(responseText);
    };

    xhr.onerror = function() {
      console.log('There was an error!');
    };

    xhr.send();
    </script>

</html>

settings.py

INSTALLED_APPS = [
    'corsheaders',
    'django.contrib.admin',
    'django.contrib.auth',
    'django.contrib.contenttypes',
    'django.contrib.sessions',
    'django.contrib.messages',
    'django.contrib.staticfiles',
    'appone'
]


MIDDLEWARE = [
    'corsheaders.middleware.CorsMiddleware',
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
]

CORS_ORIGIN_ALLOW_ALL = True

就是这样！这是每个设置，我运行服务器

python manage.py runserver

下面是我上面运行得到的

来自控制台的错误，

(index):1 XMLHttpRequest cannot load https://www.google.co.jp/?gfe_rd=cr&ei=BuxgWJ-_LIyL8QfIgYe4BQ. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://127.0.0.1:8000' is therefore not allowed access.
(index):14 There was an error!

请求Headers

:authority:www.google.co.jp
:method:GET
:path:/?gfe_rd=cr&ei=BuxgWJ-_LIyL8QfIgYe4BQ
:scheme:https
accept:*/*
accept-encoding:gzip, deflate, sdch, br
accept-language:ja,en-US;q=0.8,en;q=0.6
cache-control:no-cache
origin:http://127.0.0.1:8000
pragma:no-cache
referer:http://127.0.0.1:8000/
user-agent:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
x-client-data:CJe2yQEIpbbJAQjEtskBCPucygEIqZ3KAQ==

响应Headers

alt-svc:quic=":443"; ma=2592000; v="35,34"
cache-control:private, max-age=0
content-encoding:gzip
content-type:text/html; charset=UTF-8
date:Mon, 26 Dec 2016 10:48:37 GMT
expires:-1
p3p:CP="This is not a P3P policy! See https://www.google.com/support/accounts/answer/151657?hl=en for more info."
server:gws
set-cookie:NID=93=Mg89hJyAP7FyVu5AT9RzCWxyPndiWPZdKTDgipYBJhJwEBRXdMLTa5aPOBvLjVW6mwUCY1qSaOnPPIlqMvT2x1VjdoPhdlyK67ufk5bOFJJC9eKaEtfngw2xWBhSTSyI; expires=Tue, 27-Jun-2017 10:48:37 GMT; path=/; domain=.google.co.jp; HttpOnly
status:200
x-frame-options:SAMEORIGIN
x-xss-protection:1; mode=block

一般

Request URL:https://www.google.co.jp/?gfe_rd=cr&ei=BuxgWJ-_LIyL8QfIgYe4BQ
Request Method:GET
Status Code:200 
Remote Address:216.58.197.195:443

Answer 1

django-cors-middleware 应用程序允许您控制从不同域访问您的 Django 应用程序。它不允许您从 Django 应用程序控制对 google.co.jp 的访问。你没有控制google.co.jpreturns的headers，所以你不能使用中间件来启用cors。

如果第三方没有开启cors或者jsonp，那么你是无法使用javascript访问的。您必须改为在您的视图中获取内容。

django-cors-middleware 无效

django-cors-middleware does not work

django

django-cors-headers