Swap out AJAX with basic XDR about sentry-javascript HOT 5 CLOSED

I was under the impression that jQuery/Zepto handled cross-domain requests with jsonp, which was one of the major reasons I went ahead and made the code dependent on them. I'll do some more testing next week.

from sentry-javascript.

Upon further research, I've learned that jQuery handles cross-domain requests with the "Origin" header. If the server responds with an "Access-Control-Allow-Origin" header that matches "Origin", then the cross-domain request is allowed by the browser.

I've submitted a pull request to enable this here: dcramer/sentry#340

from sentry-javascript.

After enabling preflighted cross-domain requests (dcramer/sentry#346), this now works reliably in Chrome, Firefox, and Safari. I haven't tested it in IE yet, but I plan to. My opinion is that this is the modern way to do cross-domain requests, and we should make iframe + form requests a secondary option.

from sentry-javascript.

Are we ok with just using the origin headers and the public key at this point, or do we need to do some additional work in Sentry core?

from sentry-javascript.

This is no longer a concern

from sentry-javascript.