Closed
Description
Hello,
I encountered an issue with a CDN that blocked the x-csrf-token
header. Since the CDN and the requesting site have different hostnames, I was initially confused about where the problem was originating.
After reviewing the code, I found the following line and was wondering why https:
is not included here:
request.js/src/fetch_request.js
Line 52 in f3460a1
Is this an oversight, or is there another reason for omitting https:
?
Metadata
Metadata
Assignees
Labels
No labels