Re: [whatwg/fetch] Lowercasing of scheme in URL in conflict with WPT test for CORS check (Issue #1895) from Tim van der Lippe on 2025-12-11 (public-webapps-github@w3.org from December 2025)

From: Tim van der Lippe <notifications@github.com>
Date: Thu, 11 Dec 2025 11:38:16 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1895/3643500464@github.com>

TimvdLippe left a comment (whatwg/fetch#1895)

After further investigation, you are correct. Servo uses the Rust http + headers crates, which parse the value as a real origin (https://github.com/hyperium/headers/blob/de0b1a1e97d20f3667a346c4d5b5973d92ab58f9/src/common/access_control_allow_origin.rs#L82). This is too strict and https://github.com/servo/servo/pull/41210 aligns Servo with the rest where it treats it as a string comparison instead.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1895#issuecomment-3643500464
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1895/3643500464@github.com>

Received on Thursday, 11 December 2025 19:38:20 UTC