Confirmed users
3,816
edits
| Line 37: | Line 37: | ||
** force disconnect or invalid response --> network error | ** force disconnect or invalid response --> network error | ||
** if REQ URL contains the userinfo production (user name and password in URL) -> network error | ** if REQ URL contains the userinfo production (user name and password in URL) -> network error | ||
** REQ URL | ** REQ URL and source origin are same origin --> should get "same-origin" status (spec should be changed to still require access control headers) | ||
** access control check returns fail --> network error | ** access control check returns fail --> network error | ||
** if nothing goes wrong, ensure redirect followed and XSS XHR request rules followed | ** if nothing goes wrong, ensure redirect followed and XSS XHR request rules followed | ||