165566 2016-12-07 16:41:19 -0800 Allow commas in Accept, Accept-Language, and Content-Language request headers for simple CORS 2017-01-17 08:04:41 -0800 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED https://bugs.webkit.org/show_bug.cgi?id=165178 https://bugs.webkit.org/show_bug.cgi?id=166363 InRadar P2 Normal --- 1 wilander wilander commit-queue mike webkit-bug-importer wilander youennf oldest_to_newest 1257447 0 wilander 2016-12-07 16:41:19 -0800 https://bugs.webkit.org/show_bug.cgi?id=165178 caused a regression since it doesn't allow commas in Accept, Accept-Language, and Content-Language request headers for simple CORS. 1257448 1 wilander 2016-12-07 16:42:18 -0800 rdar://problem/29560983 1257449 2 wilander 2016-12-07 16:42:51 -0800 Also rdar://problem/29562808. 1257457 3 296439 wilander 2016-12-07 16:48:49 -0800 Created attachment 296439 Patch 1257513 4 296439 commit-queue 2016-12-07 18:08:56 -0800 Comment on attachment 296439 Patch Clearing flags on attachment: 296439 Committed r209510: <http://trac.webkit.org/changeset/209510> 1257514 5 commit-queue 2016-12-07 18:09:00 -0800 All reviewed patches have been landed. Closing bug. 296439 2016-12-07 16:48:49 -0800 2016-12-07 18:08:56 -0800 Patch bug-165566-20161207164810.patch text/plain 4532 wilander SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDIwOTQ5NykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE5IEBACisyMDE2LTEyLTA3ICBKb2huIFdp bGFuZGVyICA8d2lsYW5kZXJAYXBwbGUuY29tPgorCisgICAgICAgIEFsbG93IGNvbW1hcyBpbiBB Y2NlcHQsIEFjY2VwdC1MYW5ndWFnZSwgYW5kIENvbnRlbnQtTGFuZ3VhZ2UgcmVxdWVzdCBoZWFk ZXJzIGZvciBzaW1wbGUgQ09SUworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93 X2J1Zy5jZ2k/aWQ9MTY1NTY2CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS8yOTU2MDk4Mz4KKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBVcGRhdGVkIHRo ZSBleGlzdGluZyB0ZXN0cy4KKworICAgICAgICAqIHBsYXRmb3JtL25ldHdvcmsvSFRUUFBhcnNl cnMuY3BwOgorICAgICAgICAoV2ViQ29yZTo6aXNWYWxpZEFjY2VwdEhlYWRlclZhbHVlKToKKyAg ICAgICAgICAgIE5vdyBhbHNvIGFjY2VwdHMgJywnLgorICAgICAgICAoV2ViQ29yZTo6aXNWYWxp ZExhbmd1YWdlSGVhZGVyVmFsdWUpOgorICAgICAgICAgICAgRGl0dG8uCisKIDIwMTYtMTItMDcg IERhdmUgSHlhdHQgIDxoeWF0dEBhcHBsZS5jb20+CiAKICAgICAgICAgW0NTUyBQYXJzZXJdIENv bnNvbGlkYXRlIHN0cmluZy9pZGVudC91cmwgc2VyaWFsaXphdGlvbiBmdW5jdGlvbnMKSW5kZXg6 IFNvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL25ldHdvcmsvSFRUUFBhcnNlcnMuY3BwCj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0KLS0tIFNvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL25ldHdvcmsvSFRUUFBhcnNlcnMuY3BwCShy ZXZpc2lvbiAyMDk0ODgpCisrKyBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9uZXR3b3JrL0hUVFBQ YXJzZXJzLmNwcAkod29ya2luZyBjb3B5KQpAQCAtMTMyLDcgKzEzMiw3IEBAIGJvb2wgaXNWYWxp ZEFjY2VwdEhlYWRlclZhbHVlKGNvbnN0IFN0cmkKIHsKICAgICBmb3IgKHVuc2lnbmVkIGkgPSAw OyBpIDwgdmFsdWUubGVuZ3RoKCk7ICsraSkgewogICAgICAgICBVQ2hhciBjID0gdmFsdWVbaV07 Ci0gICAgICAgIGlmIChpc0FTQ0lJQWxwaGFudW1lcmljKGMpIHx8IGMgPT0gJyAnIHx8IGMgPT0g JyonIHx8IGMgPT0gJy4nIHx8IGMgPT0gJy8nIHx8IGMgPT0gJzsnIHx8IGMgPT0gJz0nKQorICAg ICAgICBpZiAoaXNBU0NJSUFscGhhbnVtZXJpYyhjKSB8fCBjID09ICcgJyB8fCBjID09ICcqJyB8 fCBjID09ICcsJyB8fCBjID09ICcuJyB8fCBjID09ICcvJyB8fCBjID09ICc7JyB8fCBjID09ICc9 JykKICAgICAgICAgICAgIGNvbnRpbnVlOwogICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgfQpA QCAtMTQ1LDcgKzE0NSw3IEBAIGJvb2wgaXNWYWxpZExhbmd1YWdlSGVhZGVyVmFsdWUoY29uc3Qg U3QKIHsKICAgICBmb3IgKHVuc2lnbmVkIGkgPSAwOyBpIDwgdmFsdWUubGVuZ3RoKCk7ICsraSkg ewogICAgICAgICBVQ2hhciBjID0gdmFsdWVbaV07Ci0gICAgICAgIGlmIChpc0FTQ0lJQWxwaGFu dW1lcmljKGMpIHx8IGMgPT0gJyAnIHx8IGMgPT0gJyonIHx8IGMgPT0gJy0nIHx8IGMgPT0gJy4n IHx8IGMgPT0gJzsnIHx8IGMgPT0gJz0nKQorICAgICAgICBpZiAoaXNBU0NJSUFscGhhbnVtZXJp YyhjKSB8fCBjID09ICcgJyB8fCBjID09ICcqJyB8fCBjID09ICcsJyB8fCBjID09ICctJyB8fCBj ID09ICcuJyB8fCBjID09ICc7JyB8fCBjID09ICc9JykKICAgICAgICAgICAgIGNvbnRpbnVlOwog ICAgICAgICByZXR1cm4gZmFsc2U7CiAgICAgfQpJbmRleDogTGF5b3V0VGVzdHMvQ2hhbmdlTG9n Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL0NoYW5nZUxvZwkocmV2aXNpb24gMjA5NDg4KQor KysgTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCSh3b3JraW5nIGNvcHkpCkBAIC0xLDMgKzEsMTUgQEAK KzIwMTYtMTItMDcgIEpvaG4gV2lsYW5kZXIgIDx3aWxhbmRlckBhcHBsZS5jb20+CisKKyAgICAg ICAgQWxsb3cgY29tbWFzIGluIEFjY2VwdCwgQWNjZXB0LUxhbmd1YWdlLCBhbmQgQ29udGVudC1M YW5ndWFnZSByZXF1ZXN0IGhlYWRlcnMgZm9yIHNpbXBsZSBDT1JTCisgICAgICAgIGh0dHBzOi8v YnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xNjU1NjYKKyAgICAgICAgPHJkYXI6Ly9w cm9ibGVtLzI5NTYwOTgzPgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgor CisgICAgICAgICogaHR0cC90ZXN0cy94bWxodHRwcmVxdWVzdC9jb3JzLW5vbi1zdGFuZGFyZC1z YWZlbGlzdGVkLWhlYWRlcnMtc2hvdWxkLXRyaWdnZXItcHJlZmxpZ2h0Lmh0bWw6CisgICAgICAg ICAgICBBZGRlZCAnLCcgdG8gdGhlIHRlc3RzIGFzIHdlbGwgYXMgdHdvIGV4YW1wbGVzIGZyb20K KyAgICAgICAgICAgIHR3byBzaXRlcyB3aGVyZSB3ZSBmb3VuZCBhIHJlZ3Jlc3Npb24uCisKIDIw MTYtMTItMDcgIFJ5YW4gSGFkZGFkICA8cnlhbmhhZGRhZEBhcHBsZS5jb20+CiAKICAgICAgICAg TWFya2luZyB0d28gY29tcG9zaXRpbmcgdGVzdHMgYXMgZmFpbGluZy4KSW5kZXg6IExheW91dFRl c3RzL2h0dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvY29ycy1ub24tc3RhbmRhcmQtc2FmZWxpc3Rl ZC1oZWFkZXJzLXNob3VsZC10cmlnZ2VyLXByZWZsaWdodC5odG1sCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExh eW91dFRlc3RzL2h0dHAvdGVzdHMveG1saHR0cHJlcXVlc3QvY29ycy1ub24tc3RhbmRhcmQtc2Fm ZWxpc3RlZC1oZWFkZXJzLXNob3VsZC10cmlnZ2VyLXByZWZsaWdodC5odG1sCShyZXZpc2lvbiAy MDk0ODgpCisrKyBMYXlvdXRUZXN0cy9odHRwL3Rlc3RzL3htbGh0dHByZXF1ZXN0L2NvcnMtbm9u LXN0YW5kYXJkLXNhZmVsaXN0ZWQtaGVhZGVycy1zaG91bGQtdHJpZ2dlci1wcmVmbGlnaHQuaHRt bAkod29ya2luZyBjb3B5KQpAQCAtMzQsMTIgKzM0LDEyIEBACiAgICAgfQogCiAgICAgdmFyIGFi bm9ybWFsU2ltcGxlQ29yc0hlYWRlclZhbHVlID0gIigpIHsgOjt9OyIKLSAgICB2YXIgYWxsQWxs b3dlZE5vbkFscGhhbnVtZXJpY0NoYXJhY3RlcnNGb3JBY2NlcHRIZWFkZXIgPSAiICouLzs9Igot ICAgIHZhciBhbGxBbGxvd2VkTm9uQWxwaGFudW1lcmljQ2hhcmFjdGVyc0ZvckFjY2VwdEFuZENv bnRlbnRMYW5ndWFnZUhlYWRlciA9ICIgKi0uOz0iCisgICAgdmFyIGFsbEFsbG93ZWROb25BbHBo YW51bWVyaWNDaGFyYWN0ZXJzRm9yQWNjZXB0SGVhZGVyID0gIiAqLC4vOz0iCisgICAgdmFyIGFs bEFsbG93ZWROb25BbHBoYW51bWVyaWNDaGFyYWN0ZXJzRm9yQWNjZXB0QW5kQ29udGVudExhbmd1 YWdlSGVhZGVyID0gIiAqLC0uOz0iCiAgICAgdmFyIHRlc3RDYXNlcyA9IFsKICAgICAgICAgLy8g UG9zaXRpdmUgdGVzdCBjYXNlcyB3aXRoIG5vcm1hbCBoZWFkZXJzCiAgICAgICAgIHsKLSAgICAg ICAgICAgIGhlYWRlcnNUb0FkZDogW3sgbmFtZSA6ICJBY2NlcHQiLCB2YWx1ZTogInRleHQvKiIg fV0sCisgICAgICAgICAgICBoZWFkZXJzVG9BZGQ6IFt7IG5hbWUgOiAiQWNjZXB0IiwgdmFsdWU6 ICJhcHBsaWNhdGlvbi9qc29uLHRleHQvKiwqLyoiIH1dLAogICAgICAgICAgICAgZXhwbGljaXRs eUFsbG93SGVhZGVyczogZmFsc2UsCiAgICAgICAgICAgICBzaG91bGRDYXVzZVByZWZsaWdodDog ZmFsc2UsCiAgICAgICAgICAgICBkZXNjcmlwdGlvbjogIkFjY2VwdCBoZWFkZXIgd2l0aCBub3Jt YWwgdmFsdWUgU0hPVUxEIE5PVCBjYXVzZSBhIHByZWZsaWdodCIKQEAgLTUxLDcgKzUxLDcgQEAK ICAgICAgICAgICAgIGRlc2NyaXB0aW9uOiAiQWNjZXB0IGhlYWRlciB2YWx1ZSB3aXRoIGFsbCBh bGxvd2VkIG5vbi1hbHBoYW51bWVyaWMgY2hhcmFjdGVycyBTSE9VTEQgTk9UIGNhdXNlIGEgcHJl ZmxpZ2h0IgogICAgICAgICB9CiAgICAgICAgICx7Ci0gICAgICAgICAgICBoZWFkZXJzVG9BZGQ6 IFt7IG5hbWUgOiAiQWNjZXB0LUxhbmd1YWdlIiwgdmFsdWU6ICJlbiIgfV0sCisgICAgICAgICAg ICBoZWFkZXJzVG9BZGQ6IFt7IG5hbWUgOiAiQWNjZXB0LUxhbmd1YWdlIiwgdmFsdWU6ICJlbi1V UyxlbjtxPTAuOCIgfV0sCiAgICAgICAgICAgICBleHBsaWNpdGx5QWxsb3dIZWFkZXJzOiBmYWxz ZSwKICAgICAgICAgICAgIHNob3VsZENhdXNlUHJlZmxpZ2h0OiBmYWxzZSwKICAgICAgICAgICAg IGRlc2NyaXB0aW9uOiAiQWNjZXB0LUxhbmd1YWdlIGhlYWRlciB3aXRoIG5vcm1hbCB2YWx1ZSBT SE9VTEQgTk9UIGNhdXNlIGEgcHJlZmxpZ2h0Igo=