cors.json 7.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353
  1. {
  2. "title":"Cross-Origin Resource Sharing",
  3. "description":"Method of performing XMLHttpRequests across domains",
  4. "spec":"https://fetch.spec.whatwg.org/#http-cors-protocol",
  5. "status":"ls",
  6. "links":[
  7. {
  8. "url":"https://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/",
  9. "title":"Mozilla Hacks blog post"
  10. },
  11. {
  12. "url":"http://msdn.microsoft.com/en-us/library/cc288060(VS.85).aspx",
  13. "title":"Alternative implementation by IE8"
  14. },
  15. {
  16. "url":"https://dev.opera.com/articles/view/dom-access-control-using-cross-origin-resource-sharing/",
  17. "title":"DOM access using CORS"
  18. },
  19. {
  20. "url":"https://raw.github.com/phiggins42/has.js/master/detect/features.js#native-cors-xhr",
  21. "title":"has.js test"
  22. },
  23. {
  24. "url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Access_control_CORS",
  25. "title":"MDN Web Docs - Access control CORS"
  26. }
  27. ],
  28. "bugs":[
  29. {
  30. "description":"IE10+ does not send cookies when withCredential=true ([IE Bug #759587](https://connect.microsoft.com/IE/feedback/details/759587/ie10-doesnt-support-cookies-on-cross-origin-xmlhttprequest-withcredentials-true)). A workaround is [to use a P3P policy](http://www.techrepublic.com/blog/software-engineer/craft-a-p3p-policy-to-make-ie-behave/)"
  31. },
  32. {
  33. "description":"IE10+ does not make a CORS request if port is the only difference ([IE Bug #781303](http://connect.microsoft.com/IE/feedback/details/781303))"
  34. },
  35. {
  36. "description":"Android and some old versions of WebKit (that may be found in various webview implementations) do not support Access-Control-Expose-Headers: https://code.google.com/p/android/issues/detail?id=56726"
  37. },
  38. {
  39. "description":"IE11 does not appear to support CORS for images in the `canvas` element"
  40. }
  41. ],
  42. "categories":[
  43. "JS API",
  44. "Security"
  45. ],
  46. "stats":{
  47. "ie":{
  48. "5.5":"n",
  49. "6":"n",
  50. "7":"n",
  51. "8":"a #2",
  52. "9":"a #2",
  53. "10":"a #1",
  54. "11":"y"
  55. },
  56. "edge":{
  57. "12":"y",
  58. "13":"y",
  59. "14":"y",
  60. "15":"y",
  61. "16":"y",
  62. "17":"y",
  63. "18":"y"
  64. },
  65. "firefox":{
  66. "2":"n",
  67. "3":"n",
  68. "3.5":"y",
  69. "3.6":"y",
  70. "4":"y",
  71. "5":"y",
  72. "6":"y",
  73. "7":"y",
  74. "8":"y",
  75. "9":"y",
  76. "10":"y",
  77. "11":"y",
  78. "12":"y",
  79. "13":"y",
  80. "14":"y",
  81. "15":"y",
  82. "16":"y",
  83. "17":"y",
  84. "18":"y",
  85. "19":"y",
  86. "20":"y",
  87. "21":"y",
  88. "22":"y",
  89. "23":"y",
  90. "24":"y",
  91. "25":"y",
  92. "26":"y",
  93. "27":"y",
  94. "28":"y",
  95. "29":"y",
  96. "30":"y",
  97. "31":"y",
  98. "32":"y",
  99. "33":"y",
  100. "34":"y",
  101. "35":"y",
  102. "36":"y",
  103. "37":"y",
  104. "38":"y",
  105. "39":"y",
  106. "40":"y",
  107. "41":"y",
  108. "42":"y",
  109. "43":"y",
  110. "44":"y",
  111. "45":"y",
  112. "46":"y",
  113. "47":"y",
  114. "48":"y",
  115. "49":"y",
  116. "50":"y",
  117. "51":"y",
  118. "52":"y",
  119. "53":"y",
  120. "54":"y",
  121. "55":"y",
  122. "56":"y",
  123. "57":"y",
  124. "58":"y",
  125. "59":"y",
  126. "60":"y",
  127. "61":"y",
  128. "62":"y"
  129. },
  130. "chrome":{
  131. "4":"a #1",
  132. "5":"a #1",
  133. "6":"a #1",
  134. "7":"a #1",
  135. "8":"a #1",
  136. "9":"a #1",
  137. "10":"a #1",
  138. "11":"a #1",
  139. "12":"a #1",
  140. "13":"y",
  141. "14":"y",
  142. "15":"y",
  143. "16":"y",
  144. "17":"y",
  145. "18":"y",
  146. "19":"y",
  147. "20":"y",
  148. "21":"y",
  149. "22":"y",
  150. "23":"y",
  151. "24":"y",
  152. "25":"y",
  153. "26":"y",
  154. "27":"y",
  155. "28":"y",
  156. "29":"y",
  157. "30":"y",
  158. "31":"y",
  159. "32":"y",
  160. "33":"y",
  161. "34":"y",
  162. "35":"y",
  163. "36":"y",
  164. "37":"y",
  165. "38":"y",
  166. "39":"y",
  167. "40":"y",
  168. "41":"y",
  169. "42":"y",
  170. "43":"y",
  171. "44":"y",
  172. "45":"y",
  173. "46":"y",
  174. "47":"y",
  175. "48":"y",
  176. "49":"y",
  177. "50":"y",
  178. "51":"y",
  179. "52":"y",
  180. "53":"y",
  181. "54":"y",
  182. "55":"y",
  183. "56":"y",
  184. "57":"y",
  185. "58":"y",
  186. "59":"y",
  187. "60":"y",
  188. "61":"y",
  189. "62":"y",
  190. "63":"y",
  191. "64":"y",
  192. "65":"y",
  193. "66":"y",
  194. "67":"y",
  195. "68":"y",
  196. "69":"y"
  197. },
  198. "safari":{
  199. "3.1":"n",
  200. "3.2":"n",
  201. "4":"a #1 #3",
  202. "5":"a #1 #3",
  203. "5.1":"a #1 #3",
  204. "6":"y #3",
  205. "6.1":"y #3",
  206. "7":"y #3",
  207. "7.1":"y #3",
  208. "8":"y #3",
  209. "9":"y #3",
  210. "9.1":"y #3",
  211. "10":"y #3",
  212. "10.1":"y #3",
  213. "11":"y #3",
  214. "11.1":"y #3",
  215. "TP":"y #3"
  216. },
  217. "opera":{
  218. "9":"n",
  219. "9.5-9.6":"n",
  220. "10.0-10.1":"n",
  221. "10.5":"n",
  222. "10.6":"n",
  223. "11":"n",
  224. "11.1":"n",
  225. "11.5":"n",
  226. "11.6":"n",
  227. "12":"y",
  228. "12.1":"y",
  229. "15":"y",
  230. "16":"y",
  231. "17":"y",
  232. "18":"y",
  233. "19":"y",
  234. "20":"y",
  235. "21":"y",
  236. "22":"y",
  237. "23":"y",
  238. "24":"y",
  239. "25":"y",
  240. "26":"y",
  241. "27":"y",
  242. "28":"y",
  243. "29":"y",
  244. "30":"y",
  245. "31":"y",
  246. "32":"y",
  247. "33":"y",
  248. "34":"y",
  249. "35":"y",
  250. "36":"y",
  251. "37":"y",
  252. "38":"y",
  253. "39":"y",
  254. "40":"y",
  255. "41":"y",
  256. "42":"y",
  257. "43":"y",
  258. "44":"y",
  259. "45":"y",
  260. "46":"y",
  261. "47":"y",
  262. "48":"y",
  263. "49":"y",
  264. "50":"y",
  265. "51":"y",
  266. "52":"y"
  267. },
  268. "ios_saf":{
  269. "3.2":"a #1 #3",
  270. "4.0-4.1":"a #1 #3",
  271. "4.2-4.3":"a #1 #3",
  272. "5.0-5.1":"a #1 #3",
  273. "6.0-6.1":"y #3",
  274. "7.0-7.1":"y #3",
  275. "8":"y #3",
  276. "8.1-8.4":"y #3",
  277. "9.0-9.2":"y #3",
  278. "9.3":"y #3",
  279. "10.0-10.2":"y #3",
  280. "10.3":"y #3",
  281. "11.0-11.2":"y #3",
  282. "11.3":"y #3"
  283. },
  284. "op_mini":{
  285. "all":"n"
  286. },
  287. "android":{
  288. "2.1":"a #1",
  289. "2.2":"a #1",
  290. "2.3":"a #1",
  291. "3":"a #1",
  292. "4":"a #1",
  293. "4.1":"a #1",
  294. "4.2-4.3":"a #1",
  295. "4.4":"y",
  296. "4.4.3-4.4.4":"y",
  297. "62":"y"
  298. },
  299. "bb":{
  300. "7":"a #1",
  301. "10":"y"
  302. },
  303. "op_mob":{
  304. "10":"n",
  305. "11":"n",
  306. "11.1":"n",
  307. "11.5":"n",
  308. "12":"y",
  309. "12.1":"y",
  310. "37":"y"
  311. },
  312. "and_chr":{
  313. "66":"y"
  314. },
  315. "and_ff":{
  316. "57":"y"
  317. },
  318. "ie_mob":{
  319. "10":"a #1",
  320. "11":"y"
  321. },
  322. "and_uc":{
  323. "11.8":"y"
  324. },
  325. "samsung":{
  326. "4":"y",
  327. "5":"y",
  328. "6.2":"y"
  329. },
  330. "and_qq":{
  331. "1.2":"y"
  332. },
  333. "baidu":{
  334. "7.12":"y"
  335. }
  336. },
  337. "notes":"",
  338. "notes_by_num":{
  339. "1":"Does not support CORS for images in `<canvas>`",
  340. "2":"Supported somewhat in IE8 and IE9 using the XDomainRequest object (but has [limitations](http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-workarounds.aspx))",
  341. "3":"Does not support CORS for `<video>` in `<canvas>`: https://bugs.webkit.org/show_bug.cgi?id=135379"
  342. },
  343. "usage_perc_y":93.89,
  344. "usage_perc_a":0.9,
  345. "ucprefix":false,
  346. "parent":"",
  347. "keywords":"",
  348. "ie_id":"",
  349. "chrome_id":"",
  350. "firefox_id":"",
  351. "webkit_id":"",
  352. "shown":true
  353. }