New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 601092 link

Starred by 2 users
Status: Fixed
Owner:
█ tyoshino@chromium.org
Leaves the project on 2018/03/02
Closed: Apr 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug



Sign in to add a comment

Exclude simple headers from Access-Control-Request-Headers

Project Member Reported by rajendrant@chromium.org, Apr 6 2016 
Simple headers defined in FetchUtils::isSimpleHeader() should be excluded from the CORS preflight request' Access-Control-Request-Headers header.

https://github.com/whatwg/fetch/issues/249

Pls see  https://crbug.com/599704  that excludes save-data from Access-Control-Request-Headers.

Comment 1 by tyoshino@chromium.org, Apr 15 2016

Components: Blink>Network>XHR
Labels: OS-All
Status: Started (was: Untriaged)
Project Member

Comment 3 by bugdroid1@chromium.org, Apr 21 2016 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/34d19ec118192003bcc041fdea30cd7650411402

commit 34d19ec118192003bcc041fdea30cd7650411402
Author: tyoshino <tyoshino@chromium.org>
Date: Thu Apr 21 10:09:42 2016

Exclude simple headers when building Access-Control-Request-Headers

As per https://github.com/whatwg/fetch/issues/249, we've change the
fetch algorithm to omit simple headers when building a CORS preflight
request.

BUG= 601092 
R=mkwst

Review URL: https://codereview.chromium.org/1890053002

Cr-Commit-Position: refs/heads/master@{#388733}

[modify] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/access-control-preflight-request-header-sorted.html
[modify] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/LayoutTests/http/tests/xmlhttprequest/resources/access-control-preflight-request-header-sorted.php
[modify] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/Source/core/core.gypi
[modify] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.cpp
[modify] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.h
[add] https://crrev.com/34d19ec118192003bcc041fdea30cd7650411402/third_party/WebKit/Source/core/fetch/CrossOriginAccessControlTest.cpp

Comment 4 by tyoshino@chromium.org, Apr 21 2016

Labels: M-52
Status: Fixed (was: Started)
►

Sign in to add a comment