The "trusted-cgi-referer" option can be used to add that page, or the whole
domain, as trusted source so the resulting requests aren't rejected. Requests are accepted if the
specified trusted-cgi-refer is the prefix of the Referer.
+
If the trusted source is supposed to access the CGI pages via JavaScript the cors-allowed-origin option can be used.
A trusted website which can access Privoxy's CGI pages through
+ JavaScript.
+
+
Type of value:
+
+
URL
+
+
Default value:
+
+
Unset
+
+
Effect if unset:
+
+
No external sites get access via cross-origin resource sharing.
+
+
Notes:
+
+
Modern browsers by default prevent cross-origin requests made via JavaScript to Privoxy's CGI interface even if Privoxy would trust
+ the referer because it's white listed via the trusted-cgi-referer directive.
The "cors-allowed-origin" option can be used to specify a domain that is
+ allowed to make requests to Privoxy CGI interface via JavaScript. It is used in combination with the
+ trusted-cgi-referer directive.
+
+
+
+
Warning
+
+
+
+
Declaring domains the admin doesn't control trustworthy may allow malicious third parties to
+ modify Privoxy's internal state against the user's wishes and without the user's knowledge.