Closed
Bug 1087327
Opened 11 years ago
Closed 11 years ago
CORS API should return the list of accepted headers instead of wildcard
Categories
(support.mozilla.org :: BuddyUp, defect, P2)
support.mozilla.org
BuddyUp
Tracking
(Not tracked)
RESOLVED
FIXED
2014Q4
People
(Reporter: rik, Assigned: rrosario)
References
Details
(Whiteboard: u=dev c=buddyup p=1 s=2014.19)
It seems that wildcards are not accepted for Access-Control-Allow-Headers.
You can try this jsbin: http://jsbin.com/luhanowodi/edit?js,console,output
The error message in Chrome (similar in Safari) says: XMLHttpRequest cannot load https://support.allizom.org/api/2/question/. Request header field Authorization is not allowed by Access-Control-Allow-Headers.
Firefox error message is not helpful though.
|
Reporter | |
Comment 1•11 years ago
|
||
Sorry, the good jsbin is http://jsbin.com/nofayeyoqe/2/edit?js,console,output
|
Assignee | |
Updated•11 years ago
|
Assignee: nobody → rrosario
Priority: -- → P2
Whiteboard: u=dev c=buddyup p=1 s=2014.19
Target Milestone: --- → 2014Q4
|
|
Assignee | |
Comment 2•11 years ago
|
||
In a pull request:
https://github.com/mozilla/kitsune/pull/2178
|
|
Assignee | |
Comment 3•11 years ago
|
||
Landed on master:
https://github.com/mozilla/kitsune/commit/e45f586c0839940490c736f5315eade3e64759bd
This is on stage and will go to prod in the next deploy. But since it's only being used on stage for now, marking fixed.
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•