Issue 698241  has been merged into this issue.

tyoshino@, yhirano@: Can you triage this? It seems like a relatively small set of changes that might make some developers' lives a little simpler. I know y'all are stretched, but this might be a nice small project for someone who wants to ship something. :)

Yeah, this is just do it bug. might be good to keep for interns.

It turned out that we need to resolve a spec issue. See https://github.com/whatwg/fetch/issues/548

That's now resolved, updated tests at https://bugs.chromium.org/p/chromium/issues/detail?id=698721.

 Issue 698721  has been merged into this issue.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/dd5c8e73c309f3933dfda716ef351574e35f37f2

commit dd5c8e73c309f3933dfda716ef351574e35f37f2
Author: Yutaka Hirano <yhirano@chromium.org>
Date: Mon Sep 25 07:30:56 2017

Add wildcard support for Access-Control-Allow-Methods

Bug:  615313 
Change-Id: I69653d2fa0dd6a47ecd722dfa768dbd1fb7338f4
Reviewed-on: https://chromium-review.googlesource.com/666954
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Takeshi Yoshino <tyoshino@chromium.org>
Commit-Queue: Yutaka Hirano <yhirano@chromium.org>
Cr-Commit-Position: refs/heads/master@{#504000}
[modify] https://crrev.com/dd5c8e73c309f3933dfda716ef351574e35f37f2/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-preflight-star.any-expected.txt
[modify] https://crrev.com/dd5c8e73c309f3933dfda716ef351574e35f37f2/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-preflight-star.any.worker-expected.txt
[modify] https://crrev.com/dd5c8e73c309f3933dfda716ef351574e35f37f2/third_party/WebKit/Source/platform/exported/WebCORSPreflightResultCache.cpp
[modify] https://crrev.com/dd5c8e73c309f3933dfda716ef351574e35f37f2/third_party/WebKit/public/platform/WebCORSPreflightResultCache.h

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/78991fbe376dd001e7537b7e395274b92602c948

commit 78991fbe376dd001e7537b7e395274b92602c948
Author: Yutaka Hirano <yhirano@chromium.org>
Date: Mon Sep 25 14:23:21 2017

Add wildcard support for Access-Control-Allow-Headers

Bug:  615313 
Change-Id: I81b16ac260029bca2b72f700df8634af66ca7d2f
Reviewed-on: https://chromium-review.googlesource.com/668336
Commit-Queue: Yutaka Hirano <yhirano@chromium.org>
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Takeshi Yoshino <tyoshino@chromium.org>
Cr-Commit-Position: refs/heads/master@{#504045}
[delete] https://crrev.com/66668dd55581ddff9a8f9f237cf6441a9c142716/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-preflight-star.any-expected.txt
[delete] https://crrev.com/66668dd55581ddff9a8f9f237cf6441a9c142716/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-preflight-star.any.worker-expected.txt
[modify] https://crrev.com/78991fbe376dd001e7537b7e395274b92602c948/third_party/WebKit/Source/platform/exported/WebCORSPreflightResultCache.cpp

No, it's not fixed yet. We need to support Access-Control-Expose-Headers as well.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532

commit 59a2bc8acbe0926b70b5f926ae6e2383fc6dd532
Author: Yutaka Hirano <yhirano@chromium.org>
Date: Wed Dec 06 14:40:04 2017

[Fetch] Support wildcard for access-control-expose-headers

Bug:  615313 
Change-Id: Ie608f427083303af5afd98e8939dcfc43a266942
Reviewed-on: https://chromium-review.googlesource.com/805395
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Reviewed-by: Takeshi Yoshino <tyoshino@chromium.org>
Reviewed-by: Tsuyoshi Horo <horo@chromium.org>
Commit-Queue: Yutaka Hirano <yhirano@chromium.org>
Cr-Commit-Position: refs/heads/master@{#522082}
[delete] https://crrev.com/26635467c354ce2a49e0a39765c67cd11790804b/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-expose-star-expected.txt
[delete] https://crrev.com/26635467c354ce2a49e0a39765c67cd11790804b/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-expose-star-worker-expected.txt
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/LayoutTests/external/wpt/fetch/api/cors/cors-expose-star.js
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/LayoutTests/external/wpt/service-workers/cache-storage/script-tests/cache-match.js
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/LayoutTests/external/wpt/service-workers/cache-storage/window/cache-match.https.html
[add] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/LayoutTests/external/wpt/service-workers/service-worker/fetch-cors-exposed-header-names.https.html
[add] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/LayoutTests/external/wpt/service-workers/service-worker/resources/fetch-cors-exposed-header-names-worker.js
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/core/exported/WebAssociatedURLLoaderImpl.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/core/xmlhttprequest/XMLHttpRequest.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/modules/fetch/FetchManager.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/modules/fetch/FetchResponseData.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/modules/fetch/FetchResponseData.h
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/modules/fetch/FetchResponseDataTest.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/modules/fetch/ResponseTest.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/platform/exported/WebCORS.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/Source/platform/exported/WebCORSTest.cpp
[modify] https://crrev.com/59a2bc8acbe0926b70b5f926ae6e2383fc6dd532/third_party/WebKit/public/platform/WebCORS.h

Currently Safari is passing some of the tests just introduced
https://wpt.fyi/fetch/api/cors