ApplicationInsights-JS icon indicating copy to clipboard operation
ApplicationInsights-JS copied to clipboard

[BUG] Invalid HTTP response header sent with track event

Open atkulp opened this issue 3 years ago • 4 comments

Description/Screenshot The App Insights track call sometimes returns an invalid HTTP response header that triggers a message in dev tools. I suspect this has nothing to do with this repo, but I'm not sure where to report it.

image

Invalid 'X-Frame-Options' header encountered when loading 'https://site.host.local/': 'allow' is not a recognized directive. The header will be ignored.

Steps to Reproduce Report an event which results in a call to the track endpoint (https://dc.services.visualstudio.com/v2/track)

  • OS/Browser: Edge (Chromium)
  • SDK Version [e.g. 22]:
  • How you initialized the SDK:

Expected behavior All HTTP response headers should be valid across browsers

X-Frame-Options only allows DENY or SAMEORIGIN (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)

Additional context Seen in Edge (Chromium) only so far. The header is completely missing in Chrome and Firefox (all current versions)

Firefox image

Chrome image

atkulp avatar Nov 09 '21 21:11 atkulp

This is a backend issue and not an SDK one. Will raise an internal bug on the backend team to address this issue.

MSNev avatar Nov 10 '21 17:11 MSNev

That's what I figured. Is there a place I should have been able to open this directly? Thanks for raising it internally for me!

atkulp avatar Nov 10 '21 17:11 atkulp

I don't think they have a publicly accessible location, if they do I'll post here for future references

MSNev avatar Nov 10 '21 17:11 MSNev

There is no publicly accessible location, the internal bug has been raised and for internal reference #12560602

MSNev avatar Nov 10 '21 18:11 MSNev