You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Michael[tm] Smith 24810745c2 Drop Origin & Accept from Access-Control-Allow-Headers value ... This change drops the Origin and Accept header names from the recommended value for the CORS Access-Control-Allow-Headers header. Per the CORS protocol, it’s not necessary or useful to include them. Per-spec at https://fetch.spec.whatwg.org/#forbidden-header-name, Origin is a “forbidden header name” set by the browser and that frontend JavaScript code is never allowed to set. So the value of Access-Control-Allow-Headers isn’t relevant to Origin or in general to other headers set by the browser itself — the browser never ever consults the Access-Control-Allow-Headers value to confirm that it’s OK for the request to include an Origin header. And per-spec at https://fetch.spec.whatwg.org/#cors-safelisted-request-header, Accept is a “CORS-safelisted request-header”, which means that browsers allow requests to contain the Accept header regardless of whether the Access-Control-Allow-Headers value contains "Accept". So it’s unnecessary for the Access-Control-Allow-Headers to explicitly include Accept. Browsers will not perform a CORS preflight for requests containing an Accept request header. Related: Related: https://github.com/matrix-org/synapse/pull/10114 Signed-off-by: Michael[tm] Smith <mike@w3.org>		5 years ago
..
client-server-api	Drop Origin & Accept from Access-Control-Allow-Headers value	5 years ago
rooms	Add knocking to the spec	5 years ago
_index.md	Add knocking to the spec	5 years ago
appendices.md	iterate	5 years ago
application-service-api.md	Update content to call the new template for HTTP APIs	5 years ago
changelog.md	Add changelog page and templates	5 years ago
identity-service-api.md	Merge pull request #3170 from matrix-org/travis/spec/msc2713-rm-v1-id	5 years ago
proposals.md	Clarify that implementations can use stable prefixes once an MSC has merged (#3179)	5 years ago
push-gateway-api.md	Update content to call the new template for HTTP APIs	5 years ago
server-server-api.md	Fix broken ASCII art	5 years ago