Bug 53790

Summary:	origin header not set when doing cross site worker.importScript.
Product:	WebKit	Reporter:	David Levin <levin>
Component:	WebCore Misc.	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED INVALID
Severity:	Normal	CC:	abarth, levin
Priority:	P2
Version:	528+ (Nightly build)
Hardware:	All
OS:	All

David Levin

Reported 2011-02-04 10:53:44 PST

This is a follow on to bug 50773 which addresses the issue in one place in DocumentLoader but not the place that would fix the issue for worker.importScript.

Attachments
Add attachment proposed patch, testcase, etc.

David Levin

Comment 1 2011-02-04 11:02:19 PST

Perhaps this is by design. Adding Adam so he can set me straight.

Adam Barth

Comment 2 2011-02-04 11:13:00 PST

Generally, requests get an origin header if their method isn't GET or HEAD or if they're using CORS. My understanding is that importScript is a GET request and does not use CORS. Therefore, it doesn't need an Origin header.

David Levin

Comment 3 2011-02-04 11:14:47 PST

ok, this is invalid.

Note You need to log in before you can comment on or make changes to this bug.