View Issue Details

IDProjectCategoryView StatusLast Update
0006029Talerexchangepublic2020-03-31 14:04
ReporterFlorian Dold Assigned ToFlorian Dold Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PriorityhighSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Product Versiongit (master) 
Target Version0.7.0Fixed in Version0.7.0 
Summary0006029: exchange should set CORS header
DescriptionTo allow the web extension wallet to be implemented with reduced permissions, the exchange must set the CORS header to allow the "cross-origin" request from the origin "wallet extension background page" to the exchange's origin.

The following header must be set:

  Access-Control-Allow-Origin: *
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2020-01-08 09:36

manager   ~0015250

Where precisely? In all HTTP replies? Only in OPTIONS?

Florian Dold

2020-01-14 20:11

manager   ~0015269

Both in the actually request (GET/POST), as well as for OPTIONS requests.

If OPTIONS doesn't respond with the right CORS header, browsers would refuse to even POST to the endpoint.

Florian Dold

2020-01-15 15:33

manager   ~0015274

Finished in fccde2518368b3e7109f87c3f04e3197d20c17e1

Issue History

Date ModifiedUsernameFieldChange
2020-01-07 16:20Florian DoldNew Issue
2020-01-07 16:20Florian DoldStatusnew => assigned
2020-01-07 16:20Florian DoldAssigned To => Christian Grothoff
2020-01-08 09:36Christian GrothoffNote Added: 0015250
2020-01-08 09:42Christian GrothoffStatusassigned => informing
2020-01-08 09:42Christian GrothoffResolutionopen => fixed
2020-01-08 09:42Christian GrothoffFixed in Version => 0.7.0
2020-01-08 09:42Christian GrothoffTarget Version => 0.7.0
2020-01-14 20:11Florian DoldNote Added: 0015269
2020-01-14 20:11Florian DoldPrioritynormal => high
2020-01-14 20:11Florian DoldStatusinforming => assigned
2020-01-14 20:12Florian DoldResolutionfixed => open
2020-01-15 15:32Florian DoldAssigned ToChristian Grothoff => Florian Dold
2020-01-15 15:33Florian DoldStatusassigned => informing
2020-01-15 15:33Florian DoldResolutionopen => fixed
2020-01-15 15:33Florian DoldNote Added: 0015274
2020-03-31 14:04Christian GrothoffStatusinforming => closed