Bug 199064

Summary: WKURLSchemeHandler does't run the CORS rule
Product: WebKit Reporter: Jin <ljin.zq>
Component: WebKit2Assignee: Nobody <webkit-unassigned>
Status: RESOLVED DUPLICATE    
Severity: Normal CC: achristensen, webkit-bug-importer, youennf
Priority: P2 Keywords: InRadar
Version: Other   
Hardware: Unspecified   
OS: Unspecified   

Jin
Reported 2019-06-20 02:08:31 PDT
When I setup a WKURLSchemeHandler with my custom Scheme, then send a XMLHTTPURLRequst . Just like the following code: var request = new XMLHttpRequest(); request.open('GET', 'https://www.apple.com/ac/globalnav/3/en_US/images/globalnav/search/image_small.svg', false); request.send(null); Webkit send the request immediately, but not send a Option request to www.apple.com which the CORS rule needed. I hope WKURLSchemeHandler should support CORS in the feature.
Attachments
Radar WebKit Bug Importer
Comment 1 2019-06-20 13:41:25 PDT
Jin
Comment 2 2019-06-20 23:07:27 PDT
(In reply to Jin from comment #0) > When I setup a WKURLSchemeHandler with my custom Scheme, then send a > XMLHTTPURLRequst . > Just like the following code: > > var request = new XMLHttpRequest(); > request.open('GET', > 'https://www.apple.com/ac/globalnav/3/en_US/images/globalnav/search/ > image_small.svg', false); > request.send(null); > > > Webkit send the request immediately, but not send a Option request to > www.apple.com which the CORS rule needed. > > > I hope WKURLSchemeHandler should support CORS in the feature. For Example: Load request with "uc://www.google.com" Then send a Sync XMLHttpRequest request 'https://www.apple.com/ac/globalnav/3/en_US/images/globalnav/search/image_small.svg' The XMLHttpRequest just send to apple.com. But if a send it with ASync mode , it will check the CORS rule
Alex Christensen
Comment 3 2019-12-13 13:52:40 PST
*** This bug has been marked as a duplicate of bug 205198 ***
Note You need to log in before you can comment on or make changes to this bug.