[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #19 from Jon jrob...@wikimedia.org --- It does look like the origin has to be in the url not the body. Confirmed. -- You are receiving this mail because: You are on the CC list for the bug.

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #20 from Bawolff (Brian Wolff) bawolff...@gmail.com --- (In reply to comment #19) It does look like the origin has to be in the url not the body. Confirmed. To quote the documentation: origin - When accessing the

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #18 from Michael M. listenle...@gmail.com --- (In reply to comment #17) Am I doing something wrong? I can confirm that my code from comment 0 now does work (and it does work with POST instead of GET, too). But I can confirm that

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #15 from Mark Bergsma m...@nedworks.org --- (In reply to comment #13) (In reply to comment #11) Indeed, our Squid config blocks OPTIONS requests. This is definitely deliberate, with OPTIONS being explicitly singled out and

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Mark Bergsma m...@nedworks.org changed: What|Removed |Added Status|NEW |RESOLVED

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Antoine hashar Musso has...@free.fr changed: What|Removed |Added Assignee|wikibugs-l@lists.wikimedia. |m...@nedworks.org

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #17 from Jon jrob...@wikimedia.org --- Thanks so much for doing this Mark. I can't seem to get it working though... I tried this on enwiki with the following steps: * Visited https://en.m.wikipedia.org/wiki/Special:Uploads *

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Faidon Liambotis fai...@wikimedia.org changed: What|Removed |Added CC|

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #12 from Michael M. listenle...@gmail.com --- (In reply to comment #11) What is the use case for this BTW? I know this is for CORS preflight requests, but what specifically? (from which domain to which, what it's going to be

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Mark Bergsma m...@nedworks.org changed: What|Removed |Added CC||m...@nedworks.org ---

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #14 from Jon jrob...@wikimedia.org --- I can confirm that mobile web want to do exactly the same as Michael M. Thanks for looking into this guys. -- You are receiving this mail because: You are the assignee for the bug. You are on

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #10 from Yuvi Panda yuvipa...@gmail.com --- Is there any potential downside in just letting Squid accept OPTIONS and pass it through? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Andre Klapper aklap...@wikimedia.org changed: What|Removed |Added Priority|Normal |Low

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Bawolff (Brian Wolff) bawolff...@gmail.com changed: What|Removed |Added CC|

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #7 from Piotr Sarnacki dro...@gmail.com --- I don't think OPTIONS are needed for any valid use case for CORS on Wikimedia CORS is needed if you want to do any XHR request from the different domain from the browser. So it depends

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #8 from Bawolff (Brian Wolff) bawolff...@gmail.com --- (In reply to comment #7) I don't think OPTIONS are needed for any valid use case for CORS on Wikimedia CORS is needed if you want to do any XHR request from the

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #9 from Juliusz Gonera jgon...@wikimedia.org --- Bawolff, OPTIONS is needed if you want to bind to the upload progress event on POST AJAX requests. We want to use it in MobileFrontend to show a progress bar for image uploads. See

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 Andre Klapper aklap...@wikimedia.org changed: What|Removed |Added Keywords||ops

[Bug 41731] Correctly answer to OPTIONS method (Squids appear to reject CORS OPTIONS query before it ever gets to the API)

https://bugzilla.wikimedia.org/show_bug.cgi?id=41731 --- Comment #4 from Michael M. listenle...@gmail.com --- (In reply to comment #2) The code in comment #0 does cross script request so unlikely to ever succeed. It is a cross script request, yes, but with the line xhr.withCredentials = true;