RESOLVED INVALID 53790
origin header not set when doing cross site worker.importScript. 
https://bugs.webkit.org/show_bug.cgi?id=53790
Summary origin header not set when doing cross site worker.importScript.
David Levin
Reported 2011-02-04 10:53:44 PST
This is a follow on to bug 50773 which addresses the issue in one place in DocumentLoader but not the place that would fix the issue for worker.importScript.
Attachments
Add attachment proposed patch, testcase, etc.
David Levin
Comment 1 2011-02-04 11:02:19 PST
Perhaps this is by design. Adding Adam so he can set me straight.
Adam Barth
Comment 2 2011-02-04 11:13:00 PST
Generally, requests get an origin header if their method isn't GET or HEAD or if they're using CORS. My understanding is that importScript is a GET request and does not use CORS. Therefore, it doesn't need an Origin header.
David Levin
Comment 3 2011-02-04 11:14:47 PST
ok, this is invalid.
Note You need to log in before you can comment on or make changes to this bug.