[Webkit-unassigned] [Bug 59819] Sync XHRs are rejected when the cases of the origin and destination hosts are different

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=59819


Jessie Berlin <jberlin at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|KURL.cpp should normalize   |Sync XHRs are rejected when
                   |the URL authority (host) to |the cases of the origin and
                   |lowercase                   |destination hosts are
                   |                            |different




--- Comment #3 from Jessie Berlin <jberlin at webkit.org>  2011-04-29 13:27:05 PST ---
Further IRC discussion:

abarth: I think that the answer is to use SecurityOrigin::canRequest() when checking for redirects during XMLHttpRequest (and eventually, we need to stop blocking redirects, and implement what the spec says)
<abarth> that should work
<ap> abarth: we also need to audit all other uses of protocolHostAndPortAreEqual() which is only used in appcache code, and probably replace all those with SecurityOrigin invocations

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.