test.wikipedia.org' (Header x-wikimedia-debug not allowed)
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Krinkle
	Aug 27 2019, 4:46 PM

Description

Access to XMLHttpRequest at 'https://tools.wmflabs.org/intuition/api.php?…' from origin 'https://test.wikipedia.org' has been blocked by CORS policy: Request header field x-wikimedia-debug is not allowed by Access-Control-Allow-Headers in preflight response.

Things are fine without debug mode, but this should probably be whitelisted somewhere. I think on the Toolforge/proxy side, but not entirely sure.

Related Objects

Mentioned Here: T211511: Fetching ORES API from en.wikipedia.org blocked in debug mode

Event Timeline

Krinkle created this task.Aug 27 2019, 4:46 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 27 2019, 4:46 PM

https://github.com/Krinkle/intuition-web/blob/master/public_html/api.php#L41 ?

@zhuyifei1999 Aha, thank you! Fixed now with https://github.com/Krinkle/intuition-web/commit/40ea977b7ae2.

Confirmed it no longer gets blocked with XWD on test.wikipedia.org.

I wrongly assumed it was caught by a stricter CSP rule on test.wikipedia.org compared to other wikis. But that was not the case.

Access to 'https://tools.wmflabs.org' blocked by CORS on 'https://test.wikipedia.org' (Header x-wikimedia-debug not allowed)Closed, ResolvedPublicActions

Description

Related Objects

Event Timeline

Access to 'https://tools.wmflabs.org' blocked by CORS on 'https://test.wikipedia.org' (Header x-wikimedia-debug not allowed)
Closed, ResolvedPublic
Actions