On Wed, Aug 29, 2012 at 2:55 PM, Chris Steipp csteipp@wikimedia.org wrote:
As mentioned in those bugs, mediawiki support a basic CORS implementation already. It looks like we haven't authorized any domain for wmf projects though.
Looks like Roan is taking charge on it on bug 20814, yay. :)
There are also open requests about setting up CORS headers to allow read access to upload & bits: https://bugzilla.wikimedia.org/show_bug.cgi?id=28700 https://bugzilla.wikimedia.org/show_bug.cgi?id=25886
Access for upload is important for supporting web-based tools for SVG or raster image editing (eg deploying SVGEditor extension).
[Note that we want *other sites* to be able to load files from upload.wikimedia.org, not files on upload.wikimedia.org to be able to open anything else. :)]
-- brion