On Thu, Nov 27, 2014 at 7:35 PM, Gergo Tisza gtisza@gmail.com wrote:
Brad Jorsch (Anomie <bjorsch <at> wikimedia.org> writes:
With Gerrit change 174200,[1] an HTTP header "Api-User-Agent" header will
be recognized for logging from the API. This should benefit clients using XMLHttpRequest where the normal User-Agent header is locked down by the browser. The logged agent will be the concatenation of Api-User-Agent and the browser's User-Agent header.
There doesn't seem to be any mechanism to set Access-Control-Allow-Headers accordingly for cross-site requests.
Good catch. Tracked as https://phabricator.wikimedia.org/T76340