Hi,

I was trying to use the RGW CORS support, and found that it flubbed
handling of the Access-Control-Request-Headers header badly.

It was expecting Access-Control-Allow-Headers in the request where it
should have taken the Access-Control-Request-Headers, and it was also
validating the content in a case-sensitive manner, when the CORS
standard (6.2.6) requires that headers are validated case-insensitive.

I have submitted a pull request with the fixes:
https://github.com/ceph/ceph/pull/949

I think they should be backported to emperor as well.

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Infrastructure Lead
E-Mail     : [email protected]
GnuPG FP   : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
--
To unsubscribe from this list: send the line "unsubscribe ceph-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to