Microsoft Edge doesn't follow redirect when CORS request returns 303

Issue #13752654 • Assigned to Scott W.

Details

Author
Misha P.
Created
Sep 14, 2017
Privacy
This issue is public.
Found in
  • Microsoft Edge
Found in build #
40
Reports
Reported by 6 people

Sign in to watch or report this issue.

Steps to reproduce

  1. Make CORS request to URL that returns a 303 with Location header set in the response
  2. Observe XHR error handler called with with xhr.status === 0

The following repo illustrates the issue:

https://github.com/mponizil/edge-303-repro

Attachments

0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “James M.”

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “Scott W.”

    • Not just 303. Any redirect that involves preflight 301,302,307,308. IE11 does not have the issue.

    • I see a similar behaviour when making an http CORS request from http origin to a domain with HSTS redirect, In other browsers the request is redirected with 307 Internal Redirect to https, but in IE11 the request is aborted without warnings or errors and in Edge there is a warning about “origin not found in Access-Control-Allow-Origin header”

    You need to sign in to your Microsoft account to add a comment.

    Sign in