https://bugzilla.wikimedia.org/show_bug.cgi?id=20814

--- Comment #30 from Roan Kattouw <[email protected]> 2012-09-07 23:32:39 
UTC ---
(In reply to comment #29)
> (In reply to comment #24)
> > You have to adapt the 'origin' parameter to whatever the origin domain is. I
> > was testing on English Wikipedia using HTTPS, so my example has 'origin':
> > 'https://en.wikipedia.org', you'll need to change that as appropriate.
> 
> Why is it necessary to specify the origin in the URL? Couldn't you just use 
> the
> Origin: header?
It's necessary to make Squid caching continue to work. Not including the origin
in the URL causes cache pollution. The origin parameter is actually validated
against the Origin header too, and if they don't match, a 403 is served (with
no-cache headers, of course).

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to