[tbb-bugs] #18080 [Tor Browser]: Firefox bug - CORS header 'Access-Control-Allow-Origin' missing (was: Do not strip the Access-Control-Allow-Origin header)

[Tor Bug Tracker & Wiki]

#18080: Firefox bug - CORS header 'Access-Control-Allow-Origin' missing
-----------------------------------+-----------------------------------
 Reporter:  cypherpunks            |          Owner:  tbb-team
     Type:  defect                 |         Status:  needs_information
 Priority:  Medium                 |      Milestone:
Component:  Tor Browser            |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  tbb-usability-website  |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+-----------------------------------

Comment (by bugzilla):

 Mozilla definitely has problems with that, even on it's own
 infrastructure: https://bugzilla.mozilla.org/show_bug.cgi?id=1254742
 Another part of pre45 adventures with CORS is documented here:
 https://bugzilla.mozilla.org/show_bug.cgi?id=1243453
 Despite it has been fixed, the bug continues to appear in FF45.
 Now it is often seen on youtube:
 {{{
 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the
 remote resource at https://r3---sn-
 5hnedn7y.googlevideo.com/videogoodput?id=o-ALptvSgkiq9dj8YZzEjU_IlvEja-
 D5U5YEWCtk6YDcPI&source=goodput&range=0-4999&expire=1460177375&ip=62.212.73.141&pl=24&sparams=expire,id,ip,ipbits,mm,mn,ms,mv,nh,pl,range,source&signature=1411C3663C76BC15F604D83CCE8B212269F36034.73E3F793170A0535E2418D142CABE082F2108EB6&key=cms1&cpn
 =ZN5lo-
 1WLQOGlNUK&redirect_counter=1&req_id=6484cc337323af3a&cms_redirect=yes&ipbits=0&mm=34&mn
 =sn-
 5hnedn7y&ms=ltu&mt=1460173716&mv=m&nh=IgpwcjAxLmFtczE1Kg03Mi4xNC4yMTcuMTcz.
 (Reason: CORS header 'Access-Control-Allow-Origin' missing). <unknown>
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18080#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online