Chrome 77 made a change that requires code 204 to be returned from preflight OPTIONS requests, rather than code 200 (otherwise results in long response times for some API requests). This change is reflected in a recent commit to the asm89/stack-cors project here: https://github.com/asm89/stack-cors/commit/a779b74d5719b8a752dbb5fa83453...
Drupal core has automated tests in tests/Drupal/FunctionalTests/HttpKernel/CorsIntegrationTest.php::CorsIntegrationTest but it is unclear if these tests check the preFlight response.
Once a new version of asm89/stack-cors is released, either:
This could be a minor issue if existing tests are not affected. But is a change in asm89/stack-cors for core devs to be aware of.
Also posting this for people searching for why CORS is broken (results in long response times) in D8.x with the latest Chrome 77 version. Until there is an official release of asm89/stack-cors, we will likely be pointing to the specific commit hash in our composer.json
Closed: outdated
10.1 ✨
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
@mpotter, thanks for making reporting this and making a patch.
This is now outdated. asm89/stack-cors has been updated more than once since this was created. The latest was to^2.1 in Aug 2022 📌 On-the-fly JavaScript minification Fixed .
I am closing this as outdated.