Refused to set unsafe header "Date" AngularJS

Question

I am not able to add Date in the header, every time I add the date I get the error. Refused to set unsafe header "Date"

This is My code;

 $http({
      method: 'POST',
      url: 'https:......',
      data: message,
      headers: {'Content-Type': 'application/x-www-form-urlencoded',
                                'XReference':reference,                                  
                                'Authorization':auth,
                                'Date':unixtimestamp                                 

       }
 })

Since XmlHttpRequest doesn't allow the Date header to be set, could you use a custom header of a different name for your purposes? — adam0101
– adam0101, Commented Mar 16, 2016 at 14:26

Eric Hotinger · Accepted Answer · 2016-03-16 13:45:27Z

3

Beneath $http it uses XmlHttpRequest and XmlHttpRequest isn't allowed to set the Date header as per the standard.

Step 5 states:

Terminate these steps if header is a case-insensitive match for one of the following headers...

and Date is included in that list.

It seems like some browsers allow it and others do not.

answered Mar 16, 2016 at 13:45

Eric Hotinger

9,3965 gold badges39 silver badges44 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

mulikevs Over a year ago

So how can I insert it if it is compulsory?

Eric Hotinger Over a year ago

@KelvinMuli You can't - those headers are automatically set by the browser or disabled.

Cheeso Over a year ago

some browsers allow it and others do not. Which browsers allow it? the XHR spec says "don't do this." So it would be a violation. Maybe older versions I guess.

Juan Francisco Tentor · Accepted Answer · 2020-07-17 21:48:31Z

3

Try changing "Date" to "Request-Date"

answered Jul 17, 2020 at 21:48

Juan Francisco Tentor

311 bronze badge

Comments

bigblind · Accepted Answer · 2016-03-16 13:47:21Z

0

Browsers don't allow you to set the date header in AJAX requests. According to the specification:

Terminate these steps if header is a case-insensitive match for one of the following headers:

...

Date

...

answered Mar 16, 2016 at 13:47

bigblind

12.9k14 gold badges72 silver badges132 bronze badges

1 Comment

Cheeso Over a year ago

latest URL for the spec is: xhr.spec.whatwg.org/#the-setrequestheader%28%29-method

Collectives™ on Stack Overflow

Refused to set unsafe header "Date" AngularJS

3 Answers 3

3 Comments

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related