arrow-down arrow at-sign bug check checkbox-checked checkbox-unchecked svg-checkmark chevron-right chevrons-right circle-down circle-left circle-right circle-up cloud2 svg-cross2 download download external-link filter github hash home leaf leaf left link-2 log-in log-out mail menu message-square minus plus radio-checked radio-checked2 radio-unchecked search settings spinner8 target twitter up upload-2 user users warning x zap
  • Home
  • Report a bug
  • Contribute
  • All issues
  • Login

URL: https://s3.eu-west-1.amazonaws.com/hacker-secure-cookie-2.io/sop/lab2_embedding.html

Browser / Version: Firefox 78.0
Operating System: Linux
Tested Another Browser: No

Problem type: Something else
Description: Cross origin resource sharing is allowed even when "CORS Missing Allow Origin" is displayed"
Steps to Reproduce:
I could see the response object of the mentioned website in the network monitor although it says ""CORS Missing Allow Origin". Hope this could mean that I could access the resource of "s3.eu-central-1.amazonaws.com" from "https://s3.eu-west-1.amazonaws.com"

While I try to take the screenshot and made the tab into a new window, it's no more letting me seeing the resource. Know it's showing as transferred 'O bytes' but before I saw something like '512 B' or something(don't remember). The object was something like the web owners' twitter, Udemy account etc.

Browser Configuration
  • None

From webcompat.com with ❤️

Please login to edit issues.

View issue on Github

Shortcut: Press l on your keyboard to open the label editor. Shortcut: Press g on your keyboard to be taken to the GitHub view of this page.
Closed: Duplicate
#72813

s3.eu-west-1.amazonaws.com - Cross origin resource sharing is allowed even when "CORS Missing Allow Ori

Opened: 2021-05-04
Reporter: jwu-cs
Comments: 6
  • Home
  • List of issues
  • About
  • Contribute
  • Contact
  • Privacy Policy
  • Terms of Service
  • Code of Conduct