coates’s avatarcoates’s Twitter Archive—№ 20,895

    1. Today I diagnosed a problem where Chrome sent Origin without a scheme (read: example.com instead of https: / / example.com). This broke our CORS whitelist. It might break yours too. Heads up. (Related: remember to cache Vary: Origin, friends!)
      Permalink On twitter.com Twitter logo coates’s avatar ❤️ 1 Favorite Mood -3 🙁
  1. …in reply to @coates
    …and now the “same” Chrome is sending the Origin with a trailing slash. The correct syntax is: scheme "://" host [ ":" port ] No path. Some days software is straight-up out to gaslight me. tools.ietf.org/html/rfc6454#section-7
    On twitter.com Twitter logo coates’s avatar ❤️ 1 Favorite Mood -3 🙁