-
Type: Bug
-
Status: Resolved
-
Priority: Critical
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 7.3
-
Component/s: Web Common
-
Tags:
-
Sprint:nxNag Sprint 7.3.4
-
Story Points:1
Our CORS filter current validates header names with a regex (^[a-zA-Z]\\w-*$) during preflight checks (requests with OPTIONS method) which means marshalling headers like "enrichers.document" cause a server failure due to the usage of the dot.
This is a known issue in "cors-filter" (see here) and has been fixed in 1.9.3 thus we should update to at least this version.
- depends on
-
NXP-18425 Don't use dots in custom HTTP headers
- Resolved