[Webkit-unassigned] [Bug 88139] The value in Access-Control-Allow-Origin is not being matched correctly for CORS-enabled requests

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Jun 4 12:45:45 PDT 2012


https://bugs.webkit.org/show_bug.cgi?id=88139


Odin Hørthe Omdal (odinho, Opera) <odinho at opera.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |odinho at opera.com




--- Comment #4 from Odin Hørthe Omdal (odinho, Opera) <odinho at opera.com>  2012-06-04 12:45:44 PST ---
The testcase there is pointing to a wrong domain (www.w3c-test.org), it should be no-www. The server should probably be configured in a bit more restrictive way so that it's easier to rely on the domain.

Anyway, there's an updated test, that doesn't test for the exception code (which is not that interesting):

http://w3c-test.org/webappsec/tests/cors/submitted/opera/staging/origin.htm

That URI will also change at one point if it moves to approved.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


More information about the webkit-unassigned mailing list