Handling the x-v header in CORS

The DSB proposes the following convention:

Convention CDS-DC-0005

The x-v header field should be allowed through Access-Control-Allow-Headers, in response to a pre-flight request with an Access-Control-Request-Headers header requesting the x-v header.

The x-v header field should be exposed through Access-Control-Expose-Headers, in response to a pre-flight request with an Access-Control-Request-Headers header requesting the x-v header, to allow it to be queried in the following request.

Context

See:

• CORS support
• CDS CORS
• CDS HTTP Headers
• Cross-Origin Resource Sharing (CORS) - Mozilla developer documentation
• Access-Control-Allow-Headers - Mozilla developer documentation
• Access-Control-Expose-Headers - Mozilla developer documentation
• Standards Maintenance Issue 195

Metadata

Convention ID	CDS-DC-0005
Version	1
Status	PROPOSED
Date proposed	2020-10-27