enable-cors.org icon indicating copy to clipboard operation
enable-cors.org copied to clipboard

Windows XP version of Firefox 17.0.1 and Windows version of Safari 5.1.7 doesn't fully comply with Access-Control-Expose-Headers

Open fbotis opened this issue 12 years ago • 2 comments

Even if server includes

"Access-Control-Expose-Headers: Location"

in its response I cannot access Location header using jQuery's xhr.getResponseHeader("Location") method.

I tested this scenario on Windows XP and got the next results:

Bugs: a) Firefox 17.01 - Location header is not accessible (Update: Location can be accessed if XMLHttpRequest is used instead of jQuery's $.ajax) b) Safarai 5.1.7- Location header is not accessible

Works OK: c) Chrome 23.0.1271 - Location header is accessible d) Opera 12.11 - Location header is accessible

As a side note: I can't see the OPTIONS preflight request in the Firefox's Web Console. On the other part, in Chrome's "Developer Tools" app I am able to see the preflight call.

fbotis avatar Dec 03 '12 14:12 fbotis

Thanks for the feedback. Eventually I hope to build the client section out so that it documents OS and browser quirks such as these (similar to the server section).

monsur avatar Dec 03 '12 16:12 monsur

FYI: I reported the bugs to webkit and firefox:

Firefox bug: https://bugzilla.mozilla.org/show_bug.cgi?id=817962 WebKit bug: https://bugs.webkit.org/show_bug.cgi?id=103977

fbotis avatar Dec 04 '12 09:12 fbotis