[Webkit-unassigned] [Bug 50773] CORS origin header not set on GET when source is localhost

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Dec 9 14:13:58 PST 2010


--- Comment #2 from Sky Sanders <sky.sanders at gmail.com>  2010-12-09 14:13:58 PST ---
(In reply to comment #1)
> We don't usually send Origin with GET requests.  We do send it for XMLHttpRequest if we're using CORS.  Maybe we're not using CORS for some reason?

The request logs shown represent XHR requests that should indeed be CORS.

The POST behaves as expected while the GET does not.  Again, this appears to only happen when the source is http://localhost.

This also introduces a catch 22 situation with a CORS scenario in which the source and target are both on localhost with different port numbers.

WebKit XHR demands CORS response headers due to the different port but it does not send an Origin request header which is the trigger for a server to send the response headers.

Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the webkit-unassigned mailing list