[WebInspector][CORS] Show HTTP status code in CORS messages.
authorcommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 1 Nov 2021 23:33:45 +0000 (23:33 +0000)
committercommit-queue@webkit.org <commit-queue@webkit.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 1 Nov 2021 23:33:45 +0000 (23:33 +0000)
commit787450c2bfb6bee5fe693a69e20655281432b4af
treeac61686eddde74127df3228be32ef4aa41ee7d8a
parent592b2de22d747c0b06b7151eedfd3ba620d50ecf
[WebInspector][CORS] Show HTTP status code in CORS messages.
https://bugs.webkit.org/show_bug.cgi?id=231928

LayoutTests/imported/w3c:

Patch by Michael[tm] Smith <mike@w3.org> on 2021-11-01
Reviewed by Darin Adler

Update tests with CORS messages, by adding the status code.

* web-platform-tests/html/semantics/embedded-content/media-elements/track/track-element/track-data-url-expected.txt:
* web-platform-tests/html/semantics/embedded-content/the-iframe-element/sandbox_032-expected.txt:
* web-platform-tests/html/semantics/embedded-content/the-img-element/image-loading-lazy-crossorigin-change.sub-expected.txt:
* web-platform-tests/referrer-policy/generic/sandboxed-iframe-with-opaque-origin-expected.txt:
* web-platform-tests/workers/modules/dedicated-worker-import-data-url-cross-origin-expected.txt:
* web-platform-tests/worklets/audio-worklet-credentials.https-expected.txt:
* web-platform-tests/worklets/audio-worklet-import.https-expected.txt:
* web-platform-tests/worklets/audio-worklet-referrer.https-expected.txt:

Source/WebCore:

Patch by Michael Smith <mike@w3.org> on 2021-11-01
Reviewed by Darin Adler

Make the HTTP status be included in all CORS messages that might
get logged to the Inspector console when a 4xx or 5xx error occurs.
That means these:

* Failed to load resource: Origin foo is not allowed by
Access-Control-Allow-Origin

* Failed to load resource: Preflight response is not successful

The change makes those messages read as follows (in the case of,
for example, a 500 error):

* Failed to load resource: Origin foo is not allowed by
Access-Control-Allow-Origin. Status code: 500

* Failed to load resource: Preflight response is not successful.
Status code: 500

Tests: Updates 100+ existing tests, by changing expected messages.

* loader/CrossOriginAccessControl.cpp:
(WebCore::passesAccessControlCheck):
(WebCore::validatePreflightResponse):

Source/WebKit:

Patch by Michael[tm] Smith <mike@w3.org> on 2021-11-01
Reviewed by Darin Adler

Make the HTTP status be included in all CORS messages that might
get logged to the Inspector console when a 4xx or 5xx error occurs.
That means these:

* Failed to load resource: Origin foo is not allowed by
Access-Control-Allow-Origin

* Failed to load resource: Preflight response is not successful

The change makes those messages read as follows (in the case of,
for example, a 500 error):

* Failed to load resource: Origin foo is not allowed by
Access-Control-Allow-Origin. Status code: 500

* Failed to load resource: Preflight response is not successful.
Status code: 500

Tests: Updates 100+ existing tests, by changing expected messages.

* NetworkProcess/NetworkCORSPreflightChecker.cpp:
(WebKit::NetworkCORSPreflightChecker::willPerformHTTPRedirection):

LayoutTests:

Patch by Michael Smith <mike@w3.org> on 2021-11-01
Reviewed by Darin Adler

Update tests with CORS messages, by adding the status code.

* http/tests/eventsource/eventsource-cors-basic-expected.txt:
* http/tests/loading/cross-origin-XHR-willLoadRequest-expected.txt:
* http/tests/privateClickMeasurement/attribution-conversion-through-fetch-keepalive-expected.txt:
* http/tests/security/cached-cross-origin-preloaded-css-stylesheet-expected.txt:
* http/tests/security/cached-cross-origin-preloading-css-stylesheet-expected.txt:
* http/tests/security/cannot-read-cssrules-expected.txt:
* http/tests/security/cannot-read-cssrules-redirect-expected.txt:
* http/tests/security/contentSecurityPolicy/1.1/module-scriptnonce-redirect-expected.txt:
* http/tests/security/cookie-module-import-propagate-expected.txt:
* http/tests/security/cross-origin-cached-images-expected.txt:
* http/tests/security/cross-origin-cached-resource-expected.txt:
* http/tests/security/cross-origin-cached-scripts-expected.txt:
* http/tests/security/cross-origin-cached-scripts-parallel-expected.txt:
* http/tests/security/img-with-failed-cors-check-fails-to-load-expected.txt:
* http/tests/security/import-module-crossorigin-loads-error-expected.txt:
* http/tests/security/import-module-crossorigin-loads-error-src-expected.txt:
* http/tests/security/import-script-crossorigin-loads-error-expected.txt:
* http/tests/security/isolatedWorld/cross-origin-xhr-expected.txt:
* http/tests/security/load-image-after-redirection-2-expected.txt:
* http/tests/security/load-image-after-redirection-expected.txt:
* http/tests/security/script-with-failed-cors-check-fails-to-load-expected.txt:
* http/tests/security/shape-image-cors-redirect-error-message-logging-1-expected.txt:
* http/tests/security/shape-image-cors-redirect-error-message-logging-2-expected.txt:
* http/tests/security/shape-image-cors-redirect-error-message-logging-3-expected.txt:
* http/tests/security/text-track-crossorigin-expected.txt:
* http/tests/security/video-cross-origin-accessfailure-expected.txt:
* http/tests/security/video-poster-cross-origin-crash-expected.txt:
* http/tests/security/video-poster-cross-origin-crash2-expected.txt:
* http/tests/subresource-integrity/sri-fetch-expected.txt:
* http/tests/subresource-integrity/sri-fetch-worker-expected.txt:
* http/tests/subresource-integrity/sri-module-expected.txt:
* http/tests/subresource-integrity/sri-script-expected.txt:
* http/tests/subresource-integrity/sri-style-expected.txt:
* http/tests/workers/service/service-worker-crossorigin-fetch-expected.txt:
* http/tests/workers/service/serviceworkerclients-claim.https-expected.txt:
* http/tests/workers/service/shift-reload-navigation-expected.txt:
* http/tests/xmlhttprequest/access-control-and-redirects-async-expected.txt:
* http/tests/xmlhttprequest/access-control-and-redirects-expected.txt:
* http/tests/xmlhttprequest/access-control-basic-denied-expected.txt:
* http/tests/xmlhttprequest/access-control-basic-denied-preflight-cache-expected.txt:
* http/tests/xmlhttprequest/access-control-basic-get-fail-non-simple-expected.txt:
* http/tests/xmlhttprequest/access-control-basic-post-fail-non-simple-content-type-expected.txt:
* http/tests/xmlhttprequest/access-control-preflight-async-not-supported-expected.txt:
* http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt:
* http/tests/xmlhttprequest/access-control-preflight-sync-not-supported-expected.txt:
* http/tests/xmlhttprequest/access-control-repeated-failed-preflight-crash-expected.txt:
* http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-expected.txt:
* http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-without-wildcard-expected.txt:
* http/tests/xmlhttprequest/cross-origin-no-credential-prompt-expected.txt:
* http/tests/xmlhttprequest/cross-site-denied-response-expected.txt:
* http/tests/xmlhttprequest/cross-site-denied-response-sync-2-expected.txt:
* http/tests/xmlhttprequest/cross-site-denied-response-sync-expected.txt:
* http/tests/xmlhttprequest/onerror-event-expected.txt:
* http/tests/xmlhttprequest/origin-allow-list-https-expected.txt:
* http/tests/xmlhttprequest/origin-allow-list-ip-addresses-with-subdomains-expected.txt:
* http/tests/xmlhttprequest/origin-allow-list-removal-expected.txt:
* http/tests/xmlhttprequest/origin-exact-matching-expected.txt:
* http/tests/xmlhttprequest/post-blob-content-type-async-expected.txt:
* http/tests/xmlhttprequest/post-blob-content-type-sync-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-2-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-post-sync-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-sync-expected.txt:
* http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt:
* http/tests/xmlhttprequest/simple-cross-origin-denied-events-expected.txt:
* http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt:
* http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-sync-expected.txt:
* http/tests/xmlhttprequest/simple-cross-origin-denied-events-sync-expected.txt:
* http/tests/xmlhttprequest/simple-cross-origin-progress-events-expected.txt:
* http/tests/xmlhttprequest/upload-request-error-event-order-expected.txt:
* http/tests/xmlhttprequest/workers/access-control-basic-get-fail-non-simple-expected.txt:
* http/tests/xmlhttprequest/xmlhttprequest-sync-no-progress-events-expected.txt:
* http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt:
* http/wpt/resource-timing/rt-resource-errors-expected.txt:
* http/wpt/webaudio/audioworklet-addModule-cors.sub.https-expected.txt:
* platform/glib/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt:
* platform/gtk/http/tests/security/video-cross-origin-accessfailure-expected.txt:
* platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-expected.txt:
* platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-worker-expected.txt:
* platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-origin-worker-expected.txt:
* platform/ios/http/tests/privateClickMeasurement/attribution-conversion-through-fetch-keepalive-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/access-control-and-redirects-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/post-blob-content-type-async-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/post-blob-content-type-sync-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt:
* platform/mac-wk1/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt:
* platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/none-sw-from-none.https-expected.txt:
* platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/none-sw-from-require-corp.https-expected.txt:
* platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-sw-from-none.https-expected.txt:
* platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-sw-from-require-corp.https-expected.txt:
* platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-expected.txt:
* platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-worker-expected.txt:
* platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-origin-worker-expected.txt:
* platform/win/http/tests/xmlhttprequest/access-control-and-redirects-async-expected.txt:
* platform/win/http/tests/xmlhttprequest/access-control-and-redirects-expected.txt:
* platform/win/http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt:
* platform/win/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt:
* platform/win/http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt:
* platform/win/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt:
* platform/win/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt:
* platform/wincairo-wk1/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt:
* platform/wincairo-wk1/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt:
* platform/wincairo/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt:

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285145 268f45cc-cd09-0410-ab3c-d52691b4dbfc
122 files changed:
LayoutTests/ChangeLog
LayoutTests/http/tests/eventsource/eventsource-cors-basic-expected.txt
LayoutTests/http/tests/loading/cross-origin-XHR-willLoadRequest-expected.txt
LayoutTests/http/tests/privateClickMeasurement/attribution-conversion-through-fetch-keepalive-expected.txt
LayoutTests/http/tests/security/cached-cross-origin-preloaded-css-stylesheet-expected.txt
LayoutTests/http/tests/security/cached-cross-origin-preloading-css-stylesheet-expected.txt
LayoutTests/http/tests/security/cannot-read-cssrules-expected.txt
LayoutTests/http/tests/security/cannot-read-cssrules-redirect-expected.txt
LayoutTests/http/tests/security/contentSecurityPolicy/1.1/module-scriptnonce-redirect-expected.txt
LayoutTests/http/tests/security/cookie-module-import-propagate-expected.txt
LayoutTests/http/tests/security/cross-origin-cached-images-expected.txt
LayoutTests/http/tests/security/cross-origin-cached-resource-expected.txt
LayoutTests/http/tests/security/cross-origin-cached-scripts-expected.txt
LayoutTests/http/tests/security/cross-origin-cached-scripts-parallel-expected.txt
LayoutTests/http/tests/security/img-with-failed-cors-check-fails-to-load-expected.txt
LayoutTests/http/tests/security/import-module-crossorigin-loads-error-expected.txt
LayoutTests/http/tests/security/import-module-crossorigin-loads-error-src-expected.txt
LayoutTests/http/tests/security/import-script-crossorigin-loads-error-expected.txt
LayoutTests/http/tests/security/isolatedWorld/cross-origin-xhr-expected.txt
LayoutTests/http/tests/security/load-image-after-redirection-2-expected.txt
LayoutTests/http/tests/security/load-image-after-redirection-expected.txt
LayoutTests/http/tests/security/script-with-failed-cors-check-fails-to-load-expected.txt
LayoutTests/http/tests/security/shape-image-cors-redirect-error-message-logging-1-expected.txt
LayoutTests/http/tests/security/shape-image-cors-redirect-error-message-logging-2-expected.txt
LayoutTests/http/tests/security/shape-image-cors-redirect-error-message-logging-3-expected.txt
LayoutTests/http/tests/security/text-track-crossorigin-expected.txt
LayoutTests/http/tests/security/video-cross-origin-accessfailure-expected.txt
LayoutTests/http/tests/security/video-poster-cross-origin-crash-expected.txt
LayoutTests/http/tests/security/video-poster-cross-origin-crash2-expected.txt
LayoutTests/http/tests/subresource-integrity/sri-fetch-expected.txt
LayoutTests/http/tests/subresource-integrity/sri-fetch-worker-expected.txt
LayoutTests/http/tests/subresource-integrity/sri-module-expected.txt
LayoutTests/http/tests/subresource-integrity/sri-script-expected.txt
LayoutTests/http/tests/subresource-integrity/sri-style-expected.txt
LayoutTests/http/tests/workers/service/service-worker-crossorigin-fetch-expected.txt
LayoutTests/http/tests/workers/service/serviceworkerclients-claim.https-expected.txt
LayoutTests/http/tests/workers/service/shift-reload-navigation-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-and-redirects-async-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-and-redirects-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-basic-denied-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-basic-denied-preflight-cache-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-basic-get-fail-non-simple-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-basic-post-fail-non-simple-content-type-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-preflight-async-not-supported-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-preflight-sync-not-supported-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-repeated-failed-preflight-crash-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-expected.txt
LayoutTests/http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-without-wildcard-expected.txt
LayoutTests/http/tests/xmlhttprequest/cross-origin-no-credential-prompt-expected.txt
LayoutTests/http/tests/xmlhttprequest/cross-site-denied-response-expected.txt
LayoutTests/http/tests/xmlhttprequest/cross-site-denied-response-sync-2-expected.txt
LayoutTests/http/tests/xmlhttprequest/cross-site-denied-response-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/onerror-event-expected.txt
LayoutTests/http/tests/xmlhttprequest/origin-allow-list-https-expected.txt
LayoutTests/http/tests/xmlhttprequest/origin-allow-list-ip-addresses-with-subdomains-expected.txt
LayoutTests/http/tests/xmlhttprequest/origin-allow-list-removal-expected.txt
LayoutTests/http/tests/xmlhttprequest/origin-exact-matching-expected.txt
LayoutTests/http/tests/xmlhttprequest/post-blob-content-type-async-expected.txt
LayoutTests/http/tests/xmlhttprequest/post-blob-content-type-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-2-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-post-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt
LayoutTests/http/tests/xmlhttprequest/simple-cross-origin-denied-events-expected.txt
LayoutTests/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt
LayoutTests/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/simple-cross-origin-denied-events-sync-expected.txt
LayoutTests/http/tests/xmlhttprequest/simple-cross-origin-progress-events-expected.txt
LayoutTests/http/tests/xmlhttprequest/upload-request-error-event-order-expected.txt
LayoutTests/http/tests/xmlhttprequest/workers/access-control-basic-get-fail-non-simple-expected.txt
LayoutTests/http/tests/xmlhttprequest/xmlhttprequest-sync-no-progress-events-expected.txt
LayoutTests/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt
LayoutTests/http/wpt/resource-timing/rt-resource-errors-expected.txt
LayoutTests/http/wpt/webaudio/audioworklet-addModule-cors.sub.https-expected.txt
LayoutTests/imported/w3c/ChangeLog
LayoutTests/imported/w3c/web-platform-tests/html/semantics/embedded-content/media-elements/track/track-element/track-data-url-expected.txt
LayoutTests/imported/w3c/web-platform-tests/html/semantics/embedded-content/the-iframe-element/sandbox_032-expected.txt
LayoutTests/imported/w3c/web-platform-tests/html/semantics/embedded-content/the-img-element/image-loading-lazy-crossorigin-change.sub-expected.txt
LayoutTests/imported/w3c/web-platform-tests/referrer-policy/generic/sandboxed-iframe-with-opaque-origin-expected.txt
LayoutTests/imported/w3c/web-platform-tests/workers/modules/dedicated-worker-import-data-url-cross-origin-expected.txt
LayoutTests/imported/w3c/web-platform-tests/worklets/audio-worklet-credentials.https-expected.txt
LayoutTests/imported/w3c/web-platform-tests/worklets/audio-worklet-import.https-expected.txt
LayoutTests/imported/w3c/web-platform-tests/worklets/audio-worklet-referrer.https-expected.txt
LayoutTests/platform/glib/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt
LayoutTests/platform/gtk/http/tests/security/video-cross-origin-accessfailure-expected.txt
LayoutTests/platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-expected.txt
LayoutTests/platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-worker-expected.txt
LayoutTests/platform/ios-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-origin-worker-expected.txt
LayoutTests/platform/ios/http/tests/privateClickMeasurement/attribution-conversion-through-fetch-keepalive-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/access-control-and-redirects-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/post-blob-content-type-async-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/post-blob-content-type-sync-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt
LayoutTests/platform/mac-wk1/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt
LayoutTests/platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/none-sw-from-none.https-expected.txt
LayoutTests/platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/none-sw-from-require-corp.https-expected.txt
LayoutTests/platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-sw-from-none.https-expected.txt
LayoutTests/platform/mac-wk1/imported/w3c/web-platform-tests/html/cross-origin-embedder-policy/require-corp-sw-from-require-corp.https-expected.txt
LayoutTests/platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-expected.txt
LayoutTests/platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-basic-worker-expected.txt
LayoutTests/platform/mac-wk2/imported/w3c/web-platform-tests/fetch/api/cors/cors-origin-worker-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/access-control-and-redirects-async-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/access-control-and-redirects-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/access-control-preflight-not-successful-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/redirect-cross-origin-tripmine-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt
LayoutTests/platform/win/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt
LayoutTests/platform/wincairo-wk1/http/tests/xmlhttprequest/redirect-cross-origin-post-expected.txt
LayoutTests/platform/wincairo-wk1/http/tests/xmlhttprequest/simple-cross-origin-denied-events-post-expected.txt
LayoutTests/platform/wincairo/http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt
Source/WebCore/ChangeLog
Source/WebCore/loader/CrossOriginAccessControl.cpp
Source/WebCore/loader/CrossOriginPreflightChecker.cpp
Source/WebKit/ChangeLog
Source/WebKit/NetworkProcess/NetworkCORSPreflightChecker.cpp