withCredentials breaks loading from Drive
neonstalwart opened this issue · 1 comments
neonstalwart commented
I try to load https://chromedevtools.github.io/timeline-viewer/?loadTimelineFromURL=0BzvYe7bYFf--aVhZM1RNR2N3cGc but get the following error.
Access to XMLHttpRequest at 'https://doc-04-30-docs.googleusercontent.com/docs/securesc/5rlchitd2i34t53mg48n1mnemadq3tlr/8isutrms3vsltmq3qk86onrabo262pku/1549900800000/12693691238713923539/11490550459140288456/0BzvYe7bYFf--aVhZM1RNR2N3cGc?e=download&gd=true&alt=media' from origin 'https://chromedevtools.github.io' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute.
At first I thought it was because I was trying to do something with first party auth (@google.com account) but it also fails with my @gmail.com account. I find that it works if I rollback 7b15219.