[Webkit-unassigned] [Bug 92283] New: 3rd fast-fail request made when a redirect is encountered in a CORS scenario

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=92283

           Summary: 3rd fast-fail request made when a redirect is
                    encountered in a CORS scenario
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: PC
        OS/Version: Windows 7
            Status: UNCONFIRMED
          Severity: Trivial
          Priority: P5
         Component: XML
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: collinsauve at gmail.com


Now that https://bugs.webkit.org/show_bug.cgi?id=57600 has been fixed, redirects now properly include the proper CORS headers, but it looks as though a 3rd request is being created without them and that 3rd request will fast-fail due to same-origin policy.

Set as Trivial with P5 as I see no real impact to this, it is only an internally odd/inconsistent behavior.

eg. some headers have been snipped for brevity.   this can be seen in Chrome dev tools (I am using v20.0.1132.57 m)

1. Website on http://www.example.com initiates xhr
Request:
  GET http://www.example2.com/foo HTTP/1.1
  Origin: http://www.example.com
Response:
  HTTP/1.1 302 Found
  Location: http://www.example2.com/fooNew
  Access-Control-Allow-Origin: http://www.example2.com
  Access-Control-Allow-Credentials: true
  Set-Cookie: MyCookie=bar; domain=.example2.com; expires=...; path=/

2. Browser (as expected) makes the redirect:
Request:
  GET http://www.example2.com/fooNew HTTP/1.1
  Origin: http://www.example.com
  Cookie: MyCookie=bar
Response:
  HTTP/1.1 200 OK
  Access-Control-Allow-Origin: http://www.example2.com
  Access-Control-Allow-Credentials: true
  Set-Cookie: MyCookie=bar; domain=.example2.com; expires=...; path=/

3. Browser unexpectedly starts a request that fails due to same origin policy.  This is only seen in Chrome dev tools, the request never actually goes out (and therefore there is not Response)
Request:
  GET http://www.example2.com/fooNew HTTP/1.1

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.