Closed Bug 1507514 Opened 7 years ago Closed 2 years ago

"no-cors" Headers API security checks are slightly broken

Categories

(Core :: DOM: Networking, enhancement, P2)

Product:
Core
Component:
DOM: Networking
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: annevk, Unassigned)

References

Details

(Whiteboard: [necko-triaged])

See https://github.com/whatwg/fetch/pull/833 and https://github.com/web-platform-tests/wpt/pull/14079 for tests. jkt, this is what we discussed on IRC. I confirmed on Nightly that Firefox doesn't do this correctly.
See Also: → 1483815
Thanks Anne for raising this.
Assignee: nobody → jkt
Whiteboard: [necko-triaged]

The bug assignee didn't login in Bugzilla in the last 7 months.
:dragana, could you have a look please?
For more information, please visit auto_nag documentation.

Assignee: jonathan → nobody
Flags: needinfo?(dd.mozilla)
Flags: needinfo?(dd.mozilla)
Severity: normal → S3

Looks like we already fixed this.
https://wpt.fyi/results/fetch/api/headers/headers-no-cors.any.sharedworker.html?label=experimental&label=master&aligned

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.