https://bz.apache.org/bugzilla/show_bug.cgi?id=57724
Bug ID: 57724
Summary: CorsFilter does not work correctly if the "origin" has
the same value with the "host"
Product: Tomcat 7
Version: 7.0.57
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: Catalina
Assignee: dev@tomcat.apache.org
Reporter: wenjiezhang2...@gmail.com
I am using tomcat 7.0.57, and I have CorsFilter configured in my application,
in my login page, I just have normal form with the username & password filter
and a submit button, I set the "method" to "POST', when I use Google Chrome to
login, I get a 403 error.
The reason is Google Chrome adds the "origin" into the http header, and the
value is same as the host value(both of them are "http://localhost:8000";).
It will be nice if someone can update CorsFilter.checkRequestType to return a
CORSRequestType.NOT_CORS in this case.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
