Re: CORS test status

• From: Boris Zbarsky <bzbarsky@MIT.EDU>
• Date: Tue, 25 Sep 2012 13:59:35 -0400
• To: gopal.raghavan@nokia.com
• CC: public-webappsec@w3.org
• Message-ID: <5061F107.4080801@mit.edu>

On 9/25/12 1:35 PM, gopal.raghavan@nokia.com wrote:
> You can run all the CORS testes using testRunner.
>
> http://w3c-test.org/webappsec/tests/testRunner/

I see every browser fail every test in 
http://w3c-test.org/webappsec/tests/cors/submitted/opera/js/status-preflight.htm

And as far as I can tell, that's because the response to the preflight 
has no Access-Control-* headers at all.  So the preflight fails.

-Boris

Received on Tuesday, 25 September 2012 18:00:10 UTC