Dear all,

Apparently CORS is not well supported on Android devices. I discovered
following bugs while using CORS enabled websites (e.g.
http://www.wiro.be/nieuwesite/personel/cors/index.php).

* Cache issues: whenever I use CORS requests, as defined by the
specification (http://www.w3.org/TR/cors/), it only works the first
time. Apparently cache issues are the problem. The server must use a
work-around by using the "Cache-Control: no-cache" header in the
response. After this adaption it works, but this is of course not how
it should be solved.

* Credential issues: After the previously described work-around, I
tested with the different types of CORS requests. When using
credentials, new problems come up. Apparently credentials are added to
every cross-domain request, despite the absence of the
withCredentials=true statement.

Can anyone confirm these issues?

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to