[Webkit-unassigned] [Bug 112471] cross-origin requests redirected fail or drop author requested headers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=112471


A George <ancil0504 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ancil0504 at gmail.com




--- Comment #3 from A George <ancil0504 at gmail.com>  2013-06-28 06:11:47 PST ---
(In reply to comment #2)
> (In reply to comment #1)
> > Is this the same as bug 98838?
> 
> 
> However, the requested headers should not be dropped, and the failure case (where the xhr.status is 0) is definitely a bug.

In my understanding, 'Access-Control-Allow-Headers' is received in response to a preflight request with 'Access-Control-Request-Headers'. 
It indicates the headers(user) that can be used in the the actual request.
Is this applicable for redirection as well as expected in this test?. Please correct me if I am wrong.

> An XMLHttpRequest from origin-a to origin-b that gets redirected drops the author requested headers set via xhr.setRequestHeader(). The tests demonstrate this with the "Accept" header.

The fix for this may be dependent on the bug https://bugs.webkit.org/show_bug.cgi?id=63460

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.