Bug 231174 – CORS: Allow particular Range header values without a preflight

• Status: RESOLVED
• Resolution: FIXED
• Component: DOM

[Jake Archibald]

Spec discussion: https://github.com/whatwg/fetch/issues/1310
Spec PR: https://github.com/whatwg/fetch/pull/1312
Tests PR: https://github.com/web-platform-tests/wpt/pull/31058

`Range` was added as a safe-listed header as long as the value is in a particular format, which aligns with formats the browser uses when requesting media and resuming downloads.

[Radar WebKit Bug Importer]

<rdar://problem/84101544>

CORS-safelisted request-header:
https://fetch.spec.whatwg.org/#cors-safelisted-request-header

Allowed particular Range header values (simple range header value):
https://fetch.spec.whatwg.org/#simple-range-header-value

Examples:

Range:bytes=0-255

Range:bytes=255-

[youenn fablet]

Created attachment 456547 [details]
Patch

[EWS Watchlist]

This patch modifies the imported WPT tests. Please ensure that any changes on the tests (not coming from a WPT import) are exported to WPT. Please see https://trac.webkit.org/wiki/WPTExportProcess

[youenn fablet]

Submitted web-platform-tests pull request: https://github.com/web-platform-tests/wpt/pull/33488

[Alex Christensen]

Comment on attachment 456547 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=456547&action=review

> LayoutTests/imported/w3c/web-platform-tests/fetch/range/general.any.js:129
> +    'bytes=00000000000000000000000000000000000000000000000000000000011-00000000000000000000000000000000000000000000000000000000000111',

This isn't 128 bytes.  Let's add such a test.

[youenn fablet]

Comment on attachment 456547 [details]
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=456547&action=review

>> LayoutTests/imported/w3c/web-platform-tests/fetch/range/general.any.js:129
>> +    'bytes=00000000000000000000000000000000000000000000000000000000011-00000000000000000000000000000000000000000000000000000000000111',
> 
> This isn't 128 bytes.  Let's add such a test.

I think this is 128 bytes, the other one above should be 129 and fail.

[EWS]

Committed r292293 (249191@main): <https://commits.webkit.org/249191@main>

All reviewed patches have been landed. Closing bug and clearing flags on attachment 456547 [details].