W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2012

Re: CORS test status

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Tue, 25 Sep 2012 13:59:35 -0400
Message-ID: <5061F107.4080801@mit.edu>
To: gopal.raghavan@nokia.com
CC: public-webappsec@w3.org 
On 9/25/12 1:35 PM, gopal.raghavan@nokia.com wrote:
> You can run all the CORS testes using testRunner.
>
> http://w3c-test.org/webappsec/tests/testRunner/

I see every browser fail every test in 
http://w3c-test.org/webappsec/tests/cors/submitted/opera/js/status-preflight.htm

And as far as I can tell, that's because the response to the preflight 
has no Access-Control-* headers at all.  So the preflight fails.

-Boris
Received on Tuesday, 25 September 2012 18:00:10 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:29 UTC