Click or drag to resize

CefAddCrossOriginWhitelistEntry Method

Version 94.4.20
Add an entry to the cross-origin whitelist.

Namespace:  CefSharp
Assembly:  CefSharp.Core (in CefSharp.Core.dll) Version:
public static bool AddCrossOriginWhitelistEntry(
	string sourceOrigin,
	string targetProtocol,
	string targetDomain,
	bool allowTargetSubdomains


Type: SystemString
The origin allowed to be accessed by the target protocol/domain.
Type: SystemString
The target protocol allowed to access the source origin.
Type: SystemString
The optional target domain allowed to access the source origin.
Type: SystemBoolean
If set to true would allow a if the targetDomain was set to

Return Value

Type: Boolean
Returns false if is invalid or the whitelist cannot be accessed.
The same-origin policy restricts how scripts hosted from different origins (scheme + domain + port) can communicate. By default, scripts can only access resources with the same origin. Scripts hosted on the HTTP and HTTPS schemes (but no other schemes) can use the "Access-Control-Allow-Origin" header to allow cross-origin requests. For example, can make XMLHttpRequest requests on if the request returns an "Access-Control-Allow-Origin:" response header. Scripts in separate frames or iframes and hosted from the same protocol and domain suffix can execute cross-origin JavaScript if both pages set the document.domain value to the same domain suffix. For example, scheme:// and scheme:// can communicate using JavaScript if both domains set document.domain="". This method is used to allow access to origins that would otherwise violate the same-origin policy. Scripts hosted underneath the fully qualified sourceOrigin URL (like will be allowed access to all resources hosted on the specified targetProtocol and targetDomain. If targetDomain is non-empty and allowTargetSubdomains if false only exact domain matches will be allowed. If targetDomain contains a top- level domain component (like "") and allowTargetSubdomains is true sub-domain matches will be allowed. If targetDomain is empty and allowTargetSubdomains if true all domains and IP addresses will be allowed. This method cannot be used to bypass the restrictions on local or display isolated schemes. See the comments on CefCustomScheme for more information. This function may be called on any thread. Returns false if sourceOrigin is invalid or the whitelist cannot be accessed.
See Also