Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

De-XHRify HTTP: everything except CORS #31013

Merged
merged 6 commits into from
Dec 16, 2023
Merged

De-XHRify HTTP: everything except CORS #31013

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
03e87ad
De-XHRify HTTP: everything except CORS
wbamberg Dec 14, 2023
9f3af81
Update note about client/server and push
wbamberg Dec 15, 2023
121ec81
Rewrite Access-Control-Allow-Credentials
wbamberg Dec 15, 2023
b129bd0
Clarification
wbamberg Dec 15, 2023
9a10fa0
Update files/en-us/web/http/headers/access-control-allow-credentials/…
wbamberg Dec 16, 2023
df7bf6e
Set codeface
teoli2003 Dec 16, 2023
File filter

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update files/en-us/web/http/headers/access-control-allow-credentials/… 
…index.md
  • Loading branch information
@wbamberg
wbamberg committed Dec 16, 2023
commit 9a10fa09267196f3b37e197ccd5765c31caeba3c
2 changes: 1 addition & 1 deletion files/en-us/web/http/headers/access-control-allow-credentials/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ A client can ask that credentials should be included in cross-site requests in o

If the client has asked for credentials to be included:

- If the request is {{glossary("Preflight_request", "preflighted")}}, then the preflight request does not credentials. If the server's response to the preflight request sets the `Access-Control-Allow-Credentials` header to `true`, then the real request will include credentials: otherwise, the browser reports a network error.
- If the request is {{glossary("Preflight_request", "preflighted")}}, then the preflight request does not include credentials. If the server's response to the preflight request sets the `Access-Control-Allow-Credentials` header to `true`, then the real request will include credentials: otherwise, the browser reports a network error.

- If the request is not preflighted, then the request will include credentials, and if the server's response does not set the `Access-Control-Allow-Credentials` header to `true`, the browser reports a network error.

Expand Down