Skip to content

Set the CORS filter credentials parameter explicitly instead of a header name the filter ignores - #8976

Open
rzo1 wants to merge 1 commit into
masterfrom
fix/webapp-cors-filter-defaults
Open

Set the CORS filter credentials parameter explicitly instead of a header name the filter ignores#8976
rzo1 wants to merge 1 commit into
masterfrom
fix/webapp-cors-filter-defaults

Conversation

@rzo1

@rzo1 rzo1 commented Aug 19, 2026

Copy link
Copy Markdown
Contributor

corsFilterHandle passed CrossOriginFilter.ACCESS_CONTROL_ALLOW_ORIGIN_HEADER, a response header name, where an init-param name was expected, so Jetty ignored the line and the filter ran on its own defaults.

Sets ALLOW_CREDENTIALS_PARAM explicitly and pins all four init-params in UIHelpersTest.

@rzo1 rzo1 added this to the 3.1.0 milestone Aug 19, 2026
@rzo1 rzo1 self-assigned this Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant