[Webkit-unassigned] [Bug 37781] New: [XHR] Cross-Origin synchronous request with credential raises NETWORK_ERR

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=37781

           Summary: [XHR] Cross-Origin synchronous request with credential
                    raises NETWORK_ERR
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Mac OS X 10.5
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: XML
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: jchaffraix at webkit.org


The cause of this is in DocumentThreadableLoader.cpp:loadRequest

    // FIXME: FrameLoader::loadSynchronously() does not tell us whether a
redirect happened or not, so we guess by comparing the
    // request and response URLs. This isn't a perfect test though, since a
server can serve a redirect to the same URL that was
    // requested.
    if (request.url() != response.url() && !isAllowedRedirect(response.url()))
{
        m_client->didFailRedirectCheck();
        return;
    }

The request has credentials whereas the response does not, thus the failure.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.