On Wed, Aug 29, 2012 at 2:55 PM, Chris Steipp <csteipp(a)wikimedia.org> wrote:
As mentioned in those bugs, mediawiki support a basic
CORS
implementation already. It looks like we haven't authorized any domain
for wmf projects though.
Looks like Roan is taking charge on it on bug 20814, yay. :)
There are also open requests about setting up CORS headers to allow read
access to upload & bits:
https://bugzilla.wikimedia.org/show_bug.cgi?id=28700
https://bugzilla.wikimedia.org/show_bug.cgi?id=25886
Access for upload is important for supporting web-based tools for SVG or
raster image editing (eg deploying SVGEditor extension).
[Note that we want *other sites* to be able to load files from
upload.wikimedia.org, not files on
upload.wikimedia.org to be able to open
anything else. :)]
-- brion