Page MenuHomePhabricator

Tech Wishes docker-dev Citoid needs CORS headers
Open, Needs TriagePublic

Description

Trying to create an automatic citation in our dev environment throws several CORS errors. We need to emit the correct headers.

XHROPTIONS
http://citoid.local.wmftest.net:1970/mediawiki/0-123456789-0?action=query&format=json
CORS Preflight Did Not Succeed

	
OPTIONS
	http://citoid.local.wmftest.net:1970/mediawiki/0-123456789-0?action=query&format=json
Status
404
Not Found
VersionHTTP/1.1
Transferred691 B (0 B size)
Referrer Policystrict-origin-when-cross-origin
DNS ResolutionSystem

    	
    access-control-allow-headers
    	accept, x-requested-with, content-type
    access-control-allow-origin
    	*
    access-control-expose-headers
    	etag
    Connection
    	keep-alive
    Content-Length
    	166
    Content-Security-Policy
    	default-src 'none'
    Content-Type
    	text/html; charset=utf-8
    Date
    	Wed, 17 Sep 2025 06:28:04 GMT
    Vary
    	Accept-Encoding
    x-content-security-policy
    	default-src 'self'; object-src 'none'; media-src *; img-src *; style-src *; frame-ancestors 'self'
    X-Content-Type-Options
    	nosniff
    x-frame-options
    	SAMEORIGIN
    x-webkit-csp
    	default-src 'self'; object-src 'none'; media-src *; img-src *; style-src *; frame-ancestors 'self'
    x-xss-protection
    	1; mode=block
    	
    Accept
    	*/*
    Accept-Encoding
    	gzip, deflate
    Accept-Language
    	en-US,en;q=0.5
    Access-Control-Request-Headers
    	api-user-agent
    Access-Control-Request-Method
    	GET
    Connection
    	keep-alive
    Host
    	citoid.local.wmftest.net:1970
    Origin
    	http://dev.wiki.local.wmftest.net:8080
    Priority
    	u=4
    Referer
    	http://dev.wiki.local.wmftest.net:8080/
    User-Agent
    	Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0