We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

En savoir plus

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

When will Mozilla finally fix that bug that doesn't pass "Origin" in the Ajax header when POSTing to an API with JSON?

  • 3 réponses
  • 1 a ce problème
  • 9 vues
  • Dernière réponse par Paul

Javadewd
Javadewd
more options

Hello, y'all. I love that I can perform a CORS Ajax POST to my API, but alas in Firefox for Android (Gecko/68), it is the only browser in existence that won't send the "Origin" in the header to my server, and causes my CORS call to die a miserable death. Even the desktop version of Firefox allows this, and I had no problems with Chrome, Mobile Chrome, Safari, IE, Edge, Opera... Why so stingy? I found a 9 year old thread talking about how developers kept going back and forth with this over some security issue (mainly pre-stating the origin manually in the header, or some sort of spoofing), but this seems like a real no-brainer here. Can anybody explain why I now have to exclude Firefox for Android as a useful browser to view this app?

Hello, y'all. I love that I can perform a CORS Ajax POST to my API, but alas in Firefox for Android (Gecko/68), it is the only browser in existence that won't send the "Origin" in the header to my server, and causes my CORS call to die a miserable death. Even the desktop version of Firefox allows this, and I had no problems with Chrome, Mobile Chrome, Safari, IE, Edge, Opera... Why so stingy? I found a 9 year old thread talking about how developers kept going back and forth with this over some security issue (mainly pre-stating the origin manually in the header, or some sort of spoofing), but this seems like a real no-brainer here. Can anybody explain why I now have to exclude Firefox for Android as a useful browser to view this app?

Toutes les réponses (3)

Paul
Paul
  • Top 25 Contributor
  • Moderator
more options

Hi

I must admit that I do not fully understand the issue you are having, but I recommend that you try the new Firefox Preview browser from the Google Play store as this is the focus of our developers going forwards.

Javadewd
Javadewd Auteur de la question
more options

Hmm... Downloaded Firefox Preview from the Google Play Store. It won't even run my jQuery scripts. Is there some sort of Add On, or is this "the focus of [your] developers going forward?"

Paul
Paul
  • Top 25 Contributor
  • Moderator
more options

Hi

Do you have an example of a page where these scripts are not running?