Re: CORS test status

So the test is useful, but the outcome expected by the test should be
changed to match the specification.

Do we also need another test that sends valid headers with the preflight?

On Tuesday, 25 September 2012, Boris Zbarsky wrote:

> On 9/25/12 2:15 PM, Toni Ruottu wrote:
>
>> What is the expected behaviour?
>>
>
> Of browsers, or the server?
>
> The expected behavior of a server that wants to allow the main request is
> to reply to the preflight with relevant Access-Control-Allow-Origin headers
> and such.
>
> The expected behavior of browsers when a server does not do that is to not
> do the main request.  Which is what they're doing.
>
> -Boris
>