[Webkit-unassigned] [Bug 63460] CORS should only deal with request headers set by script authors

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=63460

--- Comment #21 from youenn fablet <youennf at gmail.com> ---
(In reply to comment #20)
> One particularly unfortunate consequence of this is that when Do Not Track
> is enabled in Safari preferences, all CORS requests become non-simple ones,
> and start using preflight.

I don't know where is happening the insertion of DNT header in that case.
I guess that if they are inserted after core preflight checker, this should work nicely.

For WebKit GStreamer (bug 131484), although non-simple headers may be added, I think preflight is never used. This makes sense to me.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20160622/e53a97f3/attachment.html>