965278 - Update snippets-stats.mozilla.org to send CORS header

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Engagement, task, P4)

Description

[Osmose [:osmose, :mkelly]]

Nightly is now enforcing CORS on about:home, which means that we need to set snippets-stats.mozilla.org to send the following header:

Access-Control-Allow-Origin: null

This will allow about:home (which sends 'null' as its origin) to make requests to the stats service again.

Thanks!

Comment 1

[Daniel Maher [:phrawzty]]

The following lines have been added to the virtual host config for snippets-stats.m.o :

    # bug 965278
    Header always set Access-Control-Allow-Origin "null"

This change has been committed to Puppet and will roll out to the webheads over the next 30 minutes.

Comment 2

[Osmose [:osmose, :mkelly]]

Verified, snippets-stats is sending the header now:

mkelly@paranoia ~ $ curl https://snippets-stats.mozilla.org/foo.html?snippet -v
> GET /foo.html?snippet HTTP/1.1
> User-Agent: curl/7.24.0 (x86_64-apple-darwin12.0) libcurl/7.24.0 OpenSSL/0.9.8y zlib/1.2.5
> Host: snippets-stats.mozilla.org
> Accept: */*
>
< HTTP/1.1 200 OK
< Server: Apache
< X-Backend-Server: snippets7.webapp.phx1.mozilla.com
< Content-Type: text/html; charset=UTF-8
< Date: Fri, 31 Jan 2014 15:29:57 GMT
< Access-Control-Allow-Origin: null
< Connection: Keep-Alive
< Last-Modified: Wed, 24 Jul 2013 00:25:51 GMT
< X-Cache-Info: caching
< Content-Length: 0
<