Skip to content

FF153 Range requests pass through SW in same-origin no-cors requests#44580

Open
hamishwillee wants to merge 3 commits into
mdn:mainfrom
hamishwillee:ff152sameorigin_nocors_range_sw
Open

FF153 Range requests pass through SW in same-origin no-cors requests#44580
hamishwillee wants to merge 3 commits into
mdn:mainfrom
hamishwillee:ff152sameorigin_nocors_range_sw

Conversation

@hamishwillee

Copy link
Copy Markdown
Collaborator

FF153 allows Range headers to be preseved in a same-origin no-cors requests passed through a service worker.
This is not hugely interesting, but has been added to the release note for historical record.

Related docs work can be tracked in #44467

@hamishwillee hamishwillee requested a review from a team as a code owner June 26, 2026 05:04
@hamishwillee hamishwillee requested review from dipikabh and removed request for a team June 26, 2026 05:04
@github-actions github-actions Bot added Content:Firefox Content in the Mozilla/Firefox subtree size/s [PR only] 6-50 LoC changed labels Jun 26, 2026
Comment thread files/en-us/mozilla/firefox/releases/153/index.md Outdated
@github-actions

github-actions Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Preview URLs (1 page)

Flaws (1)

Found an unexpected or unresolvable flaw? Please report it here.

URL: /en-US/docs/Mozilla/Firefox/Releases/153
Title: Firefox 153 release notes for developers (Beta)
Flaw count: 1

  • macros:
    • Macro domxref produces link /en-US/docs/Web/API/RTCDtlsTransport/getRemoteCertificates which doesn't resolve
External URLs (1)

URL: /en-US/docs/Mozilla/Firefox/Releases/153
Title: Firefox 153 release notes for developers (Beta)

(comment last updated: 2026-06-26 05:12:01)

Comment thread files/en-us/mozilla/firefox/releases/153/index.md Outdated

- A same-origin fetch request for a media element (for example, from a {{htmlelement("video")}} element) will now pass through a service worker without stripping the {{httpheader("Range")}} header.
Previously the `Range` header was only preserved in same-origin CORS requests, made by adding the `crossorigin` attribute (`<video crossorigin>`).
Note that fetch requests for genuinely cross-origin media don't yet go through service workers.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jakearchibald I decided to add a release note following your comment in https://bugzilla.mozilla.org/show_bug.cgi?id=1465074#c34 . This look OK to you?

Note that I took your comment about cross origin media literally (it is possibly you meant cross origin no-cors media goes through the SW but range headers are stripped - but I doubt it)

@jakearchibald

Copy link
Copy Markdown
Collaborator

I'm sorry for the flip flopping on this, but I'd recommend against landing this.

There was a WHATNOT meeting last night where folks suggested the behaviour here may change in the near future, to what Firefox was doing before this change. So, Firefox may switch back to the previous behaviour pretty soon.

whatwg/fetch#1936 (comment)

Again, sorry about the flip-flopping on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Content:Firefox Content in the Mozilla/Firefox subtree size/s [PR only] 6-50 LoC changed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants