[tbb-bugs] #18080 [Tor Browser]: Do not strip the Access-Control-Allow-Origin header

[Tor Bug Tracker & Wiki]

#18080: Do not strip the Access-Control-Allow-Origin header
-------------------------+-----------------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  needs_information
 Priority:  Medium       |      Milestone:
Component:  Tor Browser  |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+-----------------------------------

Comment (by cypherpunks):

 Replying to [comment:8 gk]:
 > This happens in a vanilla Firefox as well and is probably related to the
 refresh behavior done via F5. If I reload the page with Ctrl+Shift+R I
 always get the Access-Control-Allow-Origin header. So, I guess this is not
 a bug. That said, while testing I did not encounter the "Cross-Origin
 Request Blocked:"-message. Thus, there might still be more to it. How can
 I reproduce that one?
 The steps to reproduce the "Cross-Origin Request Blocked" message are
 somewhat similar.
 1. Go to
 [https://globe.torproject.org/#/relay/1C90D3AEADFF3BCD079810632C8B85637924A58E].
 2. Open the Firefox Developer Tools window.
 3. Go to the Console tab.
 4. Use a new Tor circuit for the page.
 5. Refresh the page with F5.
 6. A "Cross-Origin Request Blocked" message is now shown in the Console
 tab.

 In this state Globe gets stuck with a loading animation for which i
 submitted #18081.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18080#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online