-
Notifications
You must be signed in to change notification settings - Fork 30
Closed
Description
Hello,
I encountered an issue with a CDN that blocked the x-csrf-token header. Since the CDN and the requesting site have different hostnames, I was initially confused about where the problem was originating.
After reviewing the code, I found the following line and was wondering why https: is not included here:
request.js/src/fetch_request.js
Line 52 in f3460a1
| if (!this.originalUrl.startsWith('http:')) { |
Is this an oversight, or is there another reason for omitting https:?
Metadata
Metadata
Assignees
Labels
No labels