Closed Bug 1802086 Opened 4 months ago Closed 2 months ago

Remove authorization from fetch on cross origin redirect

Categories

(Core :: DOM: Networking, enhancement, P2)

Product:
Core
Component:
DOM: Networking
Type:
enhancement

Tracking

()

Status:
RESOLVED FIXED
Milestone:
111 Branch
Tracking Flags:
Tracking Status
firefox111 --- fixed

People

(Reporter: valentin, Assigned: smayya)

References

(Blocks 1 open bug, Regressed 1 open bug,
URL
)

Details

(Keywords: dev-doc-complete, Whiteboard: [necko-triaged][necko-priority-queue], [wptsync upstream])

Attachments

(1 file)

Bug 1802086 - remove auth header from redirected cross-origin requests. r=#necko
48 bytes, text/x-phabricator-request
Details | Review

I think we can check for a cross origin redirect in FetchDriver::AsyncOnChannelRedirect and clear the autorization there.

Whiteboard: [necko-triaged] → [necko-triaged][necko-priority-review]
Whiteboard: [necko-triaged][necko-priority-review] → [necko-triaged][necko-priority-queue]
Attachment #9306804 - Attachment description: WIP: Bug 1802086 - remove auth header from redirected cross-origin requests → WIP: Bug 1802086 - remove auth header from redirected cross-origin requests.
Attachment #9306804 - Attachment description: WIP: Bug 1802086 - remove auth header from redirected cross-origin requests. → Bug 1802086 - remove auth header from redirected cross-origin requests. r=#necko
Pushed by archaeopteryx@coole-files.de:
https://hg.mozilla.org/integration/autoland/rev/c1a19f563004
remove auth header from redirected cross-origin requests. r=necko-reviewers,smaug,valentin
Created web-platform-tests PR https://github.com/web-platform-tests/wpt/pull/38014 for changes under testing/web-platform/tests
Whiteboard: [necko-triaged][necko-priority-queue] → [necko-triaged][necko-priority-queue], [wptsync upstream]

https://hg.mozilla.org/mozilla-central/rev/c1a19f563004

Status: NEW → RESOLVED
Closed: 2 months ago
status-firefox111: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 111 Branch
Upstream PR merged by moz-wptsync-bot
Regressions: 1817980

MDN docs work for this done in https://github.com/mdn/content/issues/22533 - pretty much complete.

Keywords: dev-doc-complete
Regressions: 1823502
You need to log in before you can comment on or make changes to this bug.