You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The CorsUtils queries the presence of the Origin and Access-Control-Request-Method with a simple non null check. But when using the reactive stack the TomcatHeadersAdapter#get() and the NettyHeadersAdapter#get() returns an empty list (instead of null) when the requested header is not present.
The effect of this is, that OPTIONS requests aren't handled with the (correct) annotated handler method but are incorrectly handled as preflight requests (which they aren't)
Johannes Edmeier opened SPR-17396 and commented
The CorsUtils queries the presence of the
Origin
andAccess-Control-Request-Method
with a simple non null check. But when using the reactive stack theTomcatHeadersAdapter#get()
and theNettyHeadersAdapter#get()
returns an empty list (instead of null) when the requested header is not present.The effect of this is, that
OPTIONS
requests aren't handled with the (correct) annotated handler method but are incorrectly handled as preflight requests (which they aren't)Affects: 5.1.1
Issue Links:
The text was updated successfully, but these errors were encountered: