[Webkit-unassigned] [Bug 112471] New: cross-origin requests redirected fail or drop author requested headers

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=112471

           Summary: cross-origin requests redirected fail or drop author
                    requested headers
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
               URL: http://origin-a.sigusrone.com/cors-redirect-accept-hea
                    der
        OS/Version: All
            Status: UNCONFIRMED
          Severity: Major
          Priority: P2
         Component: New Bugs
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: sufian at gmail.com


URL for test  case:
http://origin-a.sigusrone.com/cors-redirect-accept-header


Steps to reproduce the problem:
1. Visit http://origin-a.sigusrone.com/cors-redirect-accept-header
2. Click the "Run Tests" button


What is the expected behavior?
The test output shows all PASSes.

Firefox 15.0.1 successfully passes all tests


What actually happens?
An XMLHttpRequest from origin-a to origin-a that gets redirected to origin-b fails with status 0. Both origin-a and origin-b in this case return the correct CORS response headers.

An XMLHttpRequest from origin-a to origin-b that gets redirected drops the author requested headers set via xhr.setRequestHeader(). The tests demonstrate this with the "Accept" header.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.