Request header authorization was not present in the Access-Control-Allow-Headers list.

Issue #7112809 • Assigned to Ali A.


Apr 5, 2016
This issue is public.
Found in
  • Microsoft Edge
  • Internet Explorer
Reported by 6 people

Sign in to watch or report this issue.

Steps to reproduce

The issue can be reproduced on (Google Drive account required)

  • Open the site
  • Click on SYNC button in the top-right corner
  • Once logged into Google, open Dev Tools
  • click "Library", and pick some .epub file in "Open:"; I used (EPUB 3.0 spec)
  • it will process the file for couple of minutes (.zip unpacker, written in JS)
  • after that, you should see a page, starting with "EPUB 3.0 Specification", or a first page of whatever epub you picked
  • click on the right side of the page to switch to next page (that initiates cloud upload)
  • in dev tools console you should see book upload logs:
    “H5: started uploading EPUB 3.0 Specification (epub-665105600) to the cloud”
    “H5: uploading book chapter 0”

    "H5: finished uploading EPUB 3.0 Specification (epub-665105600)"
  • now if you reload page, and click "Library", it should start producing SEC7123 errors.


0 attachments

    Comments and activity

    • Microsoft Edge Team

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “Ali A.”

    • ‘Accept’ is a simple header, so when responding to a preflight request a server is not required to include it under Access-Control-Allow-Headers, and a browser should still allow the actual request when it’s not present.

      IE and Edge both incorrectly fail the actual request.

    • Sorry; I missed that this issue is about ‘authorization’ not 'accept’; please disregard my earlier comment.

    • Microsoft Edge Team

      Changed Assigned To from “Ali A.” to “Scott W.”

      Changed Status to “Confirmed”

      Changed Assigned To from “Scott W.” to “Ali A.”

    • Unfortunately I am also still facing with this problem with latest Edge version in the last months of 2017.

    • Microsoft Edge Team

      Changed Status from “Confirmed”

    You need to sign in to your Microsoft account to add a comment.

    Sign in