Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 350533

Summary:	Add "Origin" to the list of allowed headers in CrossOriginFilter
Product:	[RT] Jetty	Reporter:	Simone Bordet <simone.bordet>
Component:	server	Assignee:	Simone Bordet <simone.bordet>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3	CC:	jetty-inbox
Version:	7.4.2
Target Milestone:	7.2.x
Hardware:	PC
OS:	Linux
Whiteboard:

Description Simone Bordet

2011-06-28 05:25:45 EDT

Chrome 13 sends also "Origin" in the list of Access-Control-Request-Headers, so the current CrossOriginFilter configuration will deny the preflight request.

Comment 1 Simone Bordet

2011-06-28 08:08:53 EDT

Added "Origin" to default configuration.