[jira] Assigned: (INFRA-2877) Add header Access-Control-Allow-Origin: * to http://www.apache.org/dist/'

["Tony Stevenson (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/INFRA-2877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tony Stevenson reassigned INFRA-2877:
-------------------------------------

    Assignee: Tony Stevenson

> Add header Access-Control-Allow-Origin: * to http://www.apache.org/dist/'
> -------------------------------------------------------------------------
>
>                 Key: INFRA-2877
>                 URL: https://issues.apache.org/jira/browse/INFRA-2877
>             Project: Infrastructure
>          Issue Type: Improvement
>      Security Level: public(Regular issues) 
>          Components: Dists
>            Reporter: Marc Guillemot
>            Assignee: Tony Stevenson
>
> It would be great if (html) responses to pages from http://www.apache.org/dist/ (and deeper) could be served with the header:
> Access-Control-Allow-Origin: *
> I want to check per XMLHttpRequest if my web application uses the latest available version of different libraries. Cross side requests are subject to restrictions and this header tell that XMLHttpRequests are allowed to read the content (see [1] for a good explanation). I don't see any reason for the ASF not to allow access to these pages from XMLHttpRequest. In fact perhaps should all apache.org pages be returned with this headers (when Origin request header is set).
> [1] https://developer.mozilla.org/En/HTTP_Access_Control

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.