Dactyloidae/netwerk/protocol
Moonchild 96d1e2766f [network] Prepare for requiring Authorization in CORS ACAH preflight
The Authorization header with a JSON Web Token (JWT) can be sent via
XMLHttpRequest without explicit authorization via Access-Control headers.
According to the spec, this must always explicitly be mentioned in ACAH
request headers and isn't allowed to be wildcarded. However, nobody
currently obeys this rule and many websites are misconfigured because
Chromium and Firefox always allowed it.

This patch adds the more stricter code but keeps it behind an #ifdef 0
to be released later on if and when there is enough consensus on the web
to obey this spec. This patch explicitly avoids the added complexity
Mozilla added to educate web devs since our role in that respect is not
significant. it's not preffed and it won't throw an explicit deprecation
warning.

See Mozilla bugs 1687364 and 1841019.
2023-07-06 10:25:09 +08:00
..
about Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
data Issue #80 - reinstated unified building for some large chunks of our code. 2022-09-07 10:36:23 +08:00
device Issue #80 - reinstated unified building for some large chunks of our code. 2022-09-07 10:36:23 +08:00
file Issue #1656 - Remove more vim control lines. 2023-05-05 22:59:16 +08:00
ftp Issue #1656 - Remove more vim control lines. 2023-05-05 22:59:16 +08:00
http [network] Prepare for requiring Authorization in CORS ACAH preflight 2023-07-06 10:25:09 +08:00
res Issue #80 - reinstated unified building for some large chunks of our code. 2022-09-07 10:36:23 +08:00
viewsource Issue #1656 - Remove more vim control lines. 2023-05-05 22:59:16 +08:00
websocket [network] move some generic websocket code to the baseclass 2022-12-16 11:24:17 +08:00
wyciwyg Issue #1656 - Remove more vim control lines. 2023-05-05 22:59:16 +08:00
moz.build Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00