Brad Jorsch (Anomie <bjorsch <at> wikimedia.org> writes:

> With Gerrit change 174200,[1] an HTTP header "Api-User-Agent" header will
be recognized for logging from the API. This should benefit clients using
XMLHttpRequest where the normal User-Agent header is locked down by the
browser. The logged agent will be the concatenation of Api-User-Agent and the
browser's User-Agent header.

There doesn't seem to be any mechanism to set Access-Control-Allow-Headers
accordingly for cross-site requests.