Collectives™ on Stack Overflow
Find centralized, trusted content and collaborate around the technologies you use most.
Learn more about Collectives
Teams
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
Learn more about Teams
I'm trying to build an json/javascript interface to check emails on haveibeenpwned.
However, when trying to set the header, I get an error (in developer tools):
jquery-1.10.2.js:8699 Refused to set unsafe header "User-Agent"
This is my code:
$(document).ready(function() {
$.ajax({
url: 'https://haveibeenpwned.com/api/v2/breachedaccount/mark@fixitks.co.uk',
type: 'GET',
dataType: 'json',
success: function() { alert('hello!'); },
error: function() { alert('boo!'); }
headers: {
'User-Agent': 'uaheader'
I can run similar code from C# in the browser without any issues, but not in Javascript.
Is there anyway around this.
Thanks, Mark
–
–
–
There are number of forbidden headers for setRequestHeader
method. You can check here
This doc also says,
Note: The User-Agent header is no longer forbidden, as per spec — see
forbidden header name list (this was implemented in Firefox 43) — it
can now be set in a Fetch Headers object, or via XHR
setRequestHeader().
So if you run it from Firefox 43+, it will not show Refused to set unsafe header "User-Agent"
You will not face this problem if you make the request from your server
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.