[Webkit-unassigned] [Bug 63090] img.crossOrigin not respected on cached images

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63090


Kenneth Russell <kbr at google.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




--- Comment #12 from Kenneth Russell <kbr at google.com>  2012-12-21 13:44:36 PST ---
(In reply to comment #11)
> New Gist: http://jsfiddle.net/Gup6R/27/ Please disregard the earlier one!

I think you misunderstand -- the Amazon server is not sending back the response headers required for anonymous CORS requests to succeed. This is an issue you would need to take up with Amazon. Either that, or make your images publicly available on Picasa, which is known to support anonymous CORS requests correctly. Demonstration:

curl --head http://s3-us-west-1.amazonaws.com/jsfiddle/imgres-1.jpeg
curl --head --header "Origin: fiddle.jshell.net" http://s3-us-west-1.amazonaws.com/jsfiddle/imgres-1.jpeg

Neither of these responses include the necessary header "Access-Control-Allow-Origin: *". In fact, both would have to return that response header in order for them to be legal -- unless they both returned "Vary: Origin", which would break caching of the resource.

I don't believe there is a bug in WebKit in this area. I'm preemptively closing this bug as Invalid.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.