https://bugzilla.wikimedia.org/show_bug.cgi?id=30802
Web browser: ---
Bug #: 30802
Summary: Enable CORS on unauthenticated API requests
Product: MediaWiki
Version: unspecified
Platform: All
OS/Version: All
Status: NEW
Severity: enhancement
Priority: Unprioritized
Component: API
AssignedTo: [email protected]
ReportedBy: [email protected]
CC: [email protected], [email protected],
[email protected], [email protected]
Classification: Unclassified
CORS support has been requested in previous related bugzilla bugs including bug
20814, bug 28700 and bug 20298.
The MediaWiki API could be used by third-party JavaScript tools a lot easier if
it could return data cross-domain to Ajax users without them having to run
proxies or use Flash/crossdomain.xml hacks and other such things.
The solution is simple: for HTTP GET-based, non-authenticated API requests, add
the following header to the response.
Access-Control-Allow-Origin: *
More details about CORS:
http://enable-cors.org/
http://www.html5rocks.com/en/tutorials/file/xhr2/
http://www.w3.org/TR/cors/
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
