Hi all!
I have a curious mystery on my hands in the mediawiki-config repo.
In the prod settings[0], CORS is turned on for public wikis. In the labs settings[1], CORS is enabled for all subdomains of beta.wmflabs.org. I was under the impression that unset variables in the labs settings were set to whatever the prod settings had them at, but maybe I'm wrong... or maybe I'm missing something that has turned CORS off.
If anyone has any thoughts, I'd appreciate them - I'm toying with a small gadget to test cross-domain uploading.
[0] http://git.wikimedia.org/blob/operations%2Fmediawiki-config/master/wmf-confi... [1] http://git.wikimedia.org/blob/operations%2Fmediawiki-config/master/wmf-confi...
Resolved this on IRC; the MediaWiki API has a weid non-standard format https://www.mediawiki.org/wiki/API:Cross-site_requests (for caching reasons, I assume), where the Origin header has to be repeated in the URL.
multimedia@lists.wikimedia.org