[Webkit-unassigned] [Bug 103977] Cross Origin XMLHttpRequest can not expose "Location" header even if it is indicated in Access-Control-Expose-Headers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=103977





--- Comment #2 from florin.botis at gmail.com  2012-12-05 00:59:51 PST ---
Unfortunately, I don't have a specific URL for this. I tested using my local server, which has a REST API and uses Location for indicating the URL of a newly created resource. The server I'm working on isn't yet in production...


I tried to find a similar public REST API but didn't have any luck...

Maybe you can set up a local server that behaves like the one I'm working on. You only need to create a HTTP end-point that includes next headers for all  GET responses:

Access-Control-Allow-Origin:*
Access-Control-Expose-Headers:Location
Location: <some random value>

Then, make a CORS call to this endpoint and try to access Location header. You can use jQuery's $.ajax or plain XmlHttpRequest in order to test this. 

I reported a similar bug to Firefox if it helps: 

https://bugzilla.mozilla.org/show_bug.cgi?id=817962

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.