Search results

Discussion: the term for non-preflighted request ("simple request")

clarificationStandard could be clearerStandard could be clearer

impacts documentationUsed by documentation communities, such as MDN, to track changes that impact documentationUsed by documentation communities, such as MDN, to track changes that impact documentation

topic: cors

Status: Open.

#1824 In whatwg/fetch;

· elarlang opened on May 15, 2025

Add <code>Signature</code> to <code>CORS non-wildcard request-header name</code>

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

topic: http

Status: Open.

#1819 In whatwg/fetch;

· mnot opened on Apr 1, 2025

Allow Origin and Access-Control-Allow-Origin to have multiple values

addition/proposalNew features or enhancementsNew features or enhancements

needs implementer interestMoving the issue forward requires implementers to express interestMoving the issue forward requires implementers to express interest

topic: cors

Status: Open.

#1790 In whatwg/fetch;

· arulthileeban opened on Dec 5, 2024

Add <code>Last-Event-ID</code> to CORS-safelisted request headers

addition/proposalNew features or enhancementsNew features or enhancements

topic: cors

Status: Open (in progress).

whatwg/fetchnumber 1788

#1788 In whatwg/fetch;

· rexxars opened on Nov 19, 2024

If a resource allows credentials but omits Vary, shouldn't responses to non-CORS requests also contain Access-Control-Allow-Credentials?

clarificationStandard could be clearerStandard could be clearer

topic: cors

Status: Open.

#1601 In whatwg/fetch;

· jub0bs opened on Feb 2, 2023

Proposal: CORS means TAO by default

addition/proposalNew features or enhancementsNew features or enhancements

topic: cors

Status: Open.

#1414 In whatwg/fetch;

· noamr opened on Mar 17, 2022

CORS-safelisting particular client hints

topic: client hints

topic: cors

Status: Open.

#1383 In whatwg/fetch;

· eeeps opened on Jan 19, 2022

should VARY be a cors-safelisted header?

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

Status: Open.

#1365 In whatwg/fetch;

· wanderview opened on Dec 2, 2021

Access-Control-Max-Age not effective in preflight request caching when Authorization header is programatically defined

needs testsMoving the issue forward requires someone to write testsMoving the issue forward requires someone to write tests

topic: cors

Status: Open.

#1278 In whatwg/fetch;

· mfbx9da4 opened on Aug 4, 2021

CORS preflight request and window

topic: cors

Status: Open.

#1242 In whatwg/fetch;

· yutakahirano opened on May 26, 2021

Should credentialed, same-site, cross-origin requests be easier to enable?

addition/proposalNew features or enhancementsNew features or enhancements

needs implementer interestMoving the issue forward requires implementers to express interestMoving the issue forward requires implementers to express interest

topic: cors

Status: Open.

#1226 In whatwg/fetch;

· colinclerk opened on Apr 29, 2021

Use structured fields for CORS headers

topic: cors

topic: http

Status: Open.

#1216 In whatwg/fetch;

· letitz opened on Apr 14, 2021