The "Access Data Sources across Domains" setting is confusing

Not reproducible Issue #105701

Details

Created
Apr 27, 2014
Privacy
This issue is public.
Found in build #
0.0011
Reports
Reported by 2 people

Sign in to watch or report this issue.

Steps to reproduce

URL = http://ie.microsoft.com/testdrive/html5/corsupload/

URL:

Repro Steps:

  1. Go to http://ie.microsoft.com/testdrive/html5/corsupload/.
  2. Open F12 tools and start capturing network requests.
  3. Test each value of “Access Data Sources across Domains”
    4.1 At disable, you see a CORS preflight and a XHR request (200 OK).
    4.2 At prompt, exact same result as at disable (no prompt).
    4.3 At enable, only a XHR request without ORIGIN getting a 500 internal error.

Expected Results:

Maybe we misunderstood the setting’s description, but we are expecting the following:
Enable: CORS is working
Prompt: CORS is working with a prompt before the request is done
Disable: CORS doesn’t work

But, if we only misunderstood the label, we are expecting that Low predefined settings allow CORS to work and higher disable it, not the opposite.

Actual Results:

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “IPBS P.”

      Changed Status to “Won’t fix”

      Changed Assigned To from “IPBS P.” to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “David W.”

      Changed Assigned To from “David W.” to “Venkat K.”

      Changed Status from “Won’t fix”

      Changed Assigned To from “Venkat K.” to “David W.”

      Changed Status to “Confirmed”

      Changed Assigned To from “David W.” to “IPBS P.”

      Changed Status from “Confirmed” to “Won’t fix”

      Changed Assigned To from “IPBS P.” to “Venkat K.”

      Changed Assigned To to “David W.”

      Changed Status from “Won’t fix”

      Changed Assigned To from “David W.” to “IPBS P.”

      Changed Status to “Not reproducible”

    You need to sign in to your Microsoft account to add a comment.

    Sign in