cors.json 7.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371
  1. {
  2. "title":"Cross-Origin Resource Sharing",
  3. "description":"Method of performing XMLHttpRequests across domains",
  4. "spec":"https://fetch.spec.whatwg.org/#http-cors-protocol",
  5. "status":"ls",
  6. "links":[
  7. {
  8. "url":"https://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/",
  9. "title":"Mozilla Hacks blog post"
  10. },
  11. {
  12. "url":"http://msdn.microsoft.com/en-us/library/cc288060(VS.85).aspx",
  13. "title":"Alternative implementation by IE8"
  14. },
  15. {
  16. "url":"https://dev.opera.com/articles/view/dom-access-control-using-cross-origin-resource-sharing/",
  17. "title":"DOM access using CORS"
  18. },
  19. {
  20. "url":"https://raw.github.com/phiggins42/has.js/master/detect/features.js#native-cors-xhr",
  21. "title":"has.js test"
  22. },
  23. {
  24. "url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS",
  25. "title":"MDN Web Docs - Access control CORS"
  26. }
  27. ],
  28. "bugs":[
  29. {
  30. "description":"IE10+ does not send cookies when withCredential=true ([IE Bug #759587](https://connect.microsoft.com/IE/feedback/details/759587/ie10-doesnt-support-cookies-on-cross-origin-xmlhttprequest-withcredentials-true)). A workaround is [to use a P3P policy](http://www.techrepublic.com/blog/software-engineer/craft-a-p3p-policy-to-make-ie-behave/)"
  31. },
  32. {
  33. "description":"IE10+ does not make a CORS request if port is the only difference ([IE Bug #781303](http://connect.microsoft.com/IE/feedback/details/781303))"
  34. },
  35. {
  36. "description":"Android and some old versions of WebKit (that may be found in various webview implementations) do not support Access-Control-Expose-Headers: https://code.google.com/p/android/issues/detail?id=56726"
  37. },
  38. {
  39. "description":"IE11 does not appear to support CORS for images in the `canvas` element"
  40. }
  41. ],
  42. "categories":[
  43. "JS API",
  44. "Security"
  45. ],
  46. "stats":{
  47. "ie":{
  48. "5.5":"n",
  49. "6":"n",
  50. "7":"n",
  51. "8":"a #2",
  52. "9":"a #2",
  53. "10":"a #1",
  54. "11":"y"
  55. },
  56. "edge":{
  57. "12":"y",
  58. "13":"y",
  59. "14":"y",
  60. "15":"y",
  61. "16":"y",
  62. "17":"y",
  63. "18":"y"
  64. },
  65. "firefox":{
  66. "2":"n",
  67. "3":"n",
  68. "3.5":"y",
  69. "3.6":"y",
  70. "4":"y",
  71. "5":"y",
  72. "6":"y",
  73. "7":"y",
  74. "8":"y",
  75. "9":"y",
  76. "10":"y",
  77. "11":"y",
  78. "12":"y",
  79. "13":"y",
  80. "14":"y",
  81. "15":"y",
  82. "16":"y",
  83. "17":"y",
  84. "18":"y",
  85. "19":"y",
  86. "20":"y",
  87. "21":"y",
  88. "22":"y",
  89. "23":"y",
  90. "24":"y",
  91. "25":"y",
  92. "26":"y",
  93. "27":"y",
  94. "28":"y",
  95. "29":"y",
  96. "30":"y",
  97. "31":"y",
  98. "32":"y",
  99. "33":"y",
  100. "34":"y",
  101. "35":"y",
  102. "36":"y",
  103. "37":"y",
  104. "38":"y",
  105. "39":"y",
  106. "40":"y",
  107. "41":"y",
  108. "42":"y",
  109. "43":"y",
  110. "44":"y",
  111. "45":"y",
  112. "46":"y",
  113. "47":"y",
  114. "48":"y",
  115. "49":"y",
  116. "50":"y",
  117. "51":"y",
  118. "52":"y",
  119. "53":"y",
  120. "54":"y",
  121. "55":"y",
  122. "56":"y",
  123. "57":"y",
  124. "58":"y",
  125. "59":"y",
  126. "60":"y",
  127. "61":"y #4",
  128. "62":"y #4",
  129. "63":"y #4",
  130. "64":"y #4",
  131. "65":"y #4",
  132. "66":"y #4"
  133. },
  134. "chrome":{
  135. "4":"a #1",
  136. "5":"a #1",
  137. "6":"a #1",
  138. "7":"a #1",
  139. "8":"a #1",
  140. "9":"a #1",
  141. "10":"a #1",
  142. "11":"a #1",
  143. "12":"a #1",
  144. "13":"y",
  145. "14":"y",
  146. "15":"y",
  147. "16":"y",
  148. "17":"y",
  149. "18":"y",
  150. "19":"y",
  151. "20":"y",
  152. "21":"y",
  153. "22":"y",
  154. "23":"y",
  155. "24":"y",
  156. "25":"y",
  157. "26":"y",
  158. "27":"y",
  159. "28":"y",
  160. "29":"y",
  161. "30":"y",
  162. "31":"y",
  163. "32":"y",
  164. "33":"y",
  165. "34":"y",
  166. "35":"y",
  167. "36":"y",
  168. "37":"y",
  169. "38":"y",
  170. "39":"y",
  171. "40":"y",
  172. "41":"y",
  173. "42":"y",
  174. "43":"y",
  175. "44":"y",
  176. "45":"y",
  177. "46":"y",
  178. "47":"y",
  179. "48":"y",
  180. "49":"y",
  181. "50":"y",
  182. "51":"y",
  183. "52":"y",
  184. "53":"y",
  185. "54":"y",
  186. "55":"y",
  187. "56":"y",
  188. "57":"y",
  189. "58":"y",
  190. "59":"y",
  191. "60":"y",
  192. "61":"y",
  193. "62":"y",
  194. "63":"y",
  195. "64":"y",
  196. "65":"y",
  197. "66":"y",
  198. "67":"y",
  199. "68":"y",
  200. "69":"y",
  201. "70":"y",
  202. "71":"y",
  203. "72":"y",
  204. "73":"y",
  205. "74":"y"
  206. },
  207. "safari":{
  208. "3.1":"n",
  209. "3.2":"n",
  210. "4":"a #1 #3",
  211. "5":"a #1 #3",
  212. "5.1":"a #1 #3",
  213. "6":"y #3",
  214. "6.1":"y #3",
  215. "7":"y #3",
  216. "7.1":"y #3",
  217. "8":"y #3",
  218. "9":"y #3",
  219. "9.1":"y #3",
  220. "10":"y #3",
  221. "10.1":"y #3",
  222. "11":"y #3",
  223. "11.1":"y #3",
  224. "12":"y #3",
  225. "TP":"y #3"
  226. },
  227. "opera":{
  228. "9":"n",
  229. "9.5-9.6":"n",
  230. "10.0-10.1":"n",
  231. "10.5":"n",
  232. "10.6":"n",
  233. "11":"n",
  234. "11.1":"n",
  235. "11.5":"n",
  236. "11.6":"n",
  237. "12":"y",
  238. "12.1":"y",
  239. "15":"y",
  240. "16":"y",
  241. "17":"y",
  242. "18":"y",
  243. "19":"y",
  244. "20":"y",
  245. "21":"y",
  246. "22":"y",
  247. "23":"y",
  248. "24":"y",
  249. "25":"y",
  250. "26":"y",
  251. "27":"y",
  252. "28":"y",
  253. "29":"y",
  254. "30":"y",
  255. "31":"y",
  256. "32":"y",
  257. "33":"y",
  258. "34":"y",
  259. "35":"y",
  260. "36":"y",
  261. "37":"y",
  262. "38":"y",
  263. "39":"y",
  264. "40":"y",
  265. "41":"y",
  266. "42":"y",
  267. "43":"y",
  268. "44":"y",
  269. "45":"y",
  270. "46":"y",
  271. "47":"y",
  272. "48":"y",
  273. "49":"y",
  274. "50":"y",
  275. "51":"y",
  276. "52":"y",
  277. "53":"y",
  278. "54":"y",
  279. "55":"y",
  280. "56":"y",
  281. "57":"y"
  282. },
  283. "ios_saf":{
  284. "3.2":"a #1 #3",
  285. "4.0-4.1":"a #1 #3",
  286. "4.2-4.3":"a #1 #3",
  287. "5.0-5.1":"a #1 #3",
  288. "6.0-6.1":"y #3",
  289. "7.0-7.1":"y #3",
  290. "8":"y #3",
  291. "8.1-8.4":"y #3",
  292. "9.0-9.2":"y #3",
  293. "9.3":"y #3",
  294. "10.0-10.2":"y #3",
  295. "10.3":"y #3",
  296. "11.0-11.2":"y #3",
  297. "11.3-11.4":"y #3",
  298. "12.0-12.1":"y #3"
  299. },
  300. "op_mini":{
  301. "all":"n"
  302. },
  303. "android":{
  304. "2.1":"a #1",
  305. "2.2":"a #1",
  306. "2.3":"a #1",
  307. "3":"a #1",
  308. "4":"a #1",
  309. "4.1":"a #1",
  310. "4.2-4.3":"a #1",
  311. "4.4":"y",
  312. "4.4.3-4.4.4":"y",
  313. "67":"y"
  314. },
  315. "bb":{
  316. "7":"a #1",
  317. "10":"y"
  318. },
  319. "op_mob":{
  320. "10":"n",
  321. "11":"n",
  322. "11.1":"n",
  323. "11.5":"n",
  324. "12":"y",
  325. "12.1":"y",
  326. "46":"y"
  327. },
  328. "and_chr":{
  329. "70":"y"
  330. },
  331. "and_ff":{
  332. "63":"y"
  333. },
  334. "ie_mob":{
  335. "10":"a #1",
  336. "11":"y"
  337. },
  338. "and_uc":{
  339. "11.8":"y"
  340. },
  341. "samsung":{
  342. "4":"y",
  343. "5":"y",
  344. "6.2":"y",
  345. "7.2":"y"
  346. },
  347. "and_qq":{
  348. "1.2":"y"
  349. },
  350. "baidu":{
  351. "7.12":"y"
  352. }
  353. },
  354. "notes":"",
  355. "notes_by_num":{
  356. "1":"Does not support CORS for images in `<canvas>`",
  357. "2":"Supported somewhat in IE8 and IE9 using the XDomainRequest object (but has [limitations](http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-workarounds.aspx))",
  358. "3":"Does not support CORS for `<video>` in `<canvas>`: https://bugs.webkit.org/show_bug.cgi?id=135379",
  359. "4":"Does not support CORS for resources which redirect: https://bugzilla.mozilla.org/show_bug.cgi?id=1346749"
  360. },
  361. "usage_perc_y":92.85,
  362. "usage_perc_a":0.89,
  363. "ucprefix":false,
  364. "parent":"",
  365. "keywords":"",
  366. "ie_id":"",
  367. "chrome_id":"",
  368. "firefox_id":"",
  369. "webkit_id":"",
  370. "shown":true
  371. }