Skip to content

Conversation

@DuBistKomisch
Copy link
Contributor

Note: the engine.io.js file is the generated output of make engine.io.js, and should not be manually modified.

The kind of change this PR does introduce

  • a bug fix
  • a new feature
  • an update to the documentation
  • a code change that improves performance
  • other

Current behaviour

withCredentials is always set to true, despite the browser default being false, and can't be overridden.

New behaviour

withCredentials can now be overridden back to false if needed.

Other information (e.g. related issues)

Fixes #495. Specifically cross-origin requests to servers setting Access-Control-Allow-Origin: * break with xhr.withCredentials = true.

Similar to the symptom of the recent problem in socketio/socket.io#3381 but a client-side workaround when the server-side can't be changed as it could in that case.

@DuBistKomisch
Copy link
Contributor Author

not sure what's up with CI, doesn't seem to be my changes

@darrachequesne darrachequesne merged commit 2847411 into socketio:master Sep 13, 2019
@darrachequesne
Copy link
Member

@DuBistKomisch thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

XMLHttpRequest.withCredentials "always" set to true

2 participants