816557 - Fix CORS support for Mozpool

Status: RESOLVED FIXED

(Testing Graveyard :: Mozpool, defect)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

This isn't working.  The symptom is a JS alert about an error on the first operation you perform on a page, although the operation succeeds.

The first attempt was to list all known imaging servers as origins in the Access-Control-Allow-Origin header, separated by space.  This turned out to be a mis-reading of the docs.

The next attempt was to send a separate header for each origin.  This didn't work, either.

The third attempt is to look at the Origin header from a browser *before* processing the request.  If it's OK, proceed and return "Access-Control-Allow-Origin: *".  If it's not OK, don't perform the action.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Attachment: bug816557.patch

Comment 2

[Mark Côté [:mcote]]

Comment on attachment 697047 [details] [diff] [review]
bug816557.patch

Review of attachment 697047 [details] [diff] [review]:
-----------------------------------------------------------------

Cool, that works.  I see you actually still return the specific origin, and not * like in comment #0, but this way is better.