Fetching secured Images about cornerstonewebimageloader HOT 6 CLOSED

Set
image.crossOrigin = 'anonymous';
to
image.crossOrigin = 'use-credentials';

in cornerstoneWebImageLoader.js

from cornerstonewebimageloader.

I just modified cornerstoneWebImageLoader to use XHR to load images and included a mechanism to configure a beforeSend callback so you can modify XHR as needed (e.g. to add auth headers). See the example on how to use this.

Please close this issue if it meets your needs

from cornerstonewebimageloader.

Chafey

I think the Image() constructor does not respect the Same-origin policy however xmlhttprequest does. (unless server permits it ... with the needed configuration changes.)

Am i allowed to suggest a duo solution, or am i missing out on some information?

from cornerstonewebimageloader.

You are free to suggest anything! Are you saying that you need the less secure CORS bypassing feature of Image()?

from cornerstonewebimageloader.

Personally: no, I use a reverse proxy for the collection of image resources because we want to audit and control everything that happens on top of the vendor provided image archives.

In the past I've seen Image() being used to bypass same-origin policy for viewing server side rendered dicom, I'd figure other people would like to make use of it too.

Anyway perhaps this is outside the scope of this small plugin. I'll suggest a patch that allows the unsafe Image() constructor in parallel with the xmlhttprequest and lets see if people like it or not.

Thanks for your contributions Chafey, I really enjoy your liberary, i feel guilty that my work|life currently doesn't permit me to spend too much time to help out with the tools. I hope to improve this in the future.

from cornerstonewebimageloader.

Personally I think the library should default to safe and secure behavior and should not use Image() at all. If someone wants to bypass CORS, they can make their own image loader.

Please don't feel guilty at all - the fact that it is being used and people appreciate it is highly satisfying. I hope you can find time to contribute in the future so you can experience the same satisfaction I do!

from cornerstonewebimageloader.