[Webkit-unassigned] [Bug 206349] New: Web Inspector: should make it more visible that an OPTIONS request is made (and failed) for XMLHttpRequest

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Thu Jan 16 05:09:44 PST 2020


https://bugs.webkit.org/show_bug.cgi?id=206349

            Bug ID: 206349
           Summary: Web Inspector: should make it more visible that an
                    OPTIONS request is made (and failed) for
                    XMLHttpRequest
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: All
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Web Inspector
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: HenkPoley at gmail.com
                CC: inspector-bugzilla-changes at group.apple.com

When an OPTIONS request fails to properly respond, it would be nice if something like "[Error] Invalid response to OPTIONS request" should be logged in the JavaScript console and visualized the Web Inspector.

Currently, when you do an XMLHttpRequest, and the server fails to respond to a request that uses the OPTIONS method, this fact is kept secret to the developer looking at the Web Inspector.

You will only see the generic `[Error] XMLHttpRequest cannot load ..URL.. due to access control checks.` in the JavaScript console. Other problems around Cross-Origin Resource Sharing (CORS) with XMLHttpRequest will write a descriptive [Error] to the JavaScript console. The use of the OPTIONS method is only disclosed by doing a MITM-attack on the connection to the offending API. This is not very developer friendly. Readily available 'answers' through search engines will not mention what you need to fix, since other CORS problems also return that generic [Error].

(Tested in WebKit/Windows buildbot build 254668)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200116/4dc5a7e5/attachment.htm>


More information about the webkit-unassigned mailing list