When calling the MediaWiki REST API from a chrome extension the request is not allowed because of CORS
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Addshore
	Nov 9 2020, 3:01 PM

Description

{
"error": "rest-cross-origin-anon-write",
"httpCode": 403,
"httpReason": "Forbidden"
}

This is due to the AJAX control which is controlable via https://www.mediawiki.org/wiki/Manual:$wgCrossSiteAJAXdomains
However, this hardcodes https? and thus can never work for things like chrome extensions.

Details

	Subject	Repo	Branch	Lines +/-
	REST: Allow AJAX calling from chrome-extensions	mediawiki/core	master	+8 -1

Customize query in gerrit

Event Timeline

Addshore created this task.Nov 9 2020, 3:01 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 9 2020, 3:01 PM

Change 640170 had a related patch set uploaded (by Addshore; owner: Addshore):
[mediawiki/core@master] REST: Allow AJAX calling from chrome-extensions

https://gerrit.wikimedia.org/r/640170

gerritbot added a project: Patch-For-Review.Nov 9 2020, 3:03 PM

Change 640170 abandoned by Addshore:

[mediawiki/core@master] REST: Allow AJAX calling from chrome-extensions

Reason:

https://gerrit.wikimedia.org/r/640170

Maintenance_bot removed a project: Patch-For-Review.Sep 15 2021, 9:11 AM

When calling the MediaWiki REST API from a chrome extension the request is not allowed because of CORSOpen, Needs TriagePublicActions

Description

Details

Event Timeline

When calling the MediaWiki REST API from a chrome extension the request is not allowed because of CORS
Open, Needs TriagePublic
Actions