cross domain request was not possible. Either your BOSH server does not send any Access-Control-Allow-Origin header or the content-security-policy (CSP) blocks your request. The safest way is still to use Apache ProxyRequest or Nginx proxy_pass. about jsxc

[DanScharon]

two thoughts:

• have you tried to upgrade Prosody to 0.12? It comes with CORS support for BOSH by default
• you have a typo in your rewrite rule. It should say https:// instead of http:// But I'd recommend proxying instead of rewrite anyways, so it should rather look like this:

  RequestHeader set X-Forwarded-Proto "https"
  ProxyPreserveHost On
  ProxyPass /  http://localhost:5280/

and you need to enable these apache modules:

• proxy
• proxy_http

And in the global prosody config you need to add localhost to the trusted_proxies:

trusted_proxies = { "127.0.0.1", "::1" }