Re: Accessing debuginfod from web browsers

2024-12-03 Thread Frank Ch. Eigler
Hi - > I am working on a DWARF parser and visualizer as a web app, Neat. > [...] debuginfod currently does not do that, it does not respond to > OPTIONS method and it does not send the |Access-Control-Allow-Origin > header. I don't think there are any security downsides to enabling > this opti

Accessing debuginfod from web browsers

2024-12-03 Thread Henning Meyer
Hi, I am working on a DWARF parser and visualizer as a web app, and I noticed that debuginfod cannot be used from web applications: The browser's security model prevents XmlHttpRequests to foreign servers from JavaScript unless the server advertises that it is okay to do so, following the CORS pr