Github CORS requirement clarification
See original GitHub issueI’ve been asking Github to enable CORS headers to their HTTPS git servers, but they’ve refused to do it. This means that a browser can never clone from github because the browser will disallow XHR requests to the domain. They do, however, offer a REST interface to the raw git data. Using this I wrote a mixin for js-git that uses github as the backend store.
I am trying to understand if the lack of CORS support is limiting, if you are able to use the raw git data API. I guess this just necessitates the js-github
adapter as opposed to using the normal git communication mechanisms. is it otherwise feature complete? Does this include pushing commits back to github?
Issue Analytics
- State:
- Created 9 years ago
- Comments:12 (5 by maintainers)
Top Results From Across the Web
SRI: explain CORS requirement clearly · Issue #418 - GitHub
The CORS requirement in the specification I feel isn't clear enough for developers to understand why CORS was made as a requirement.
Read more >CORS support on git servers · Issue #263 · isaacs/github
Hello, I am working on an in-browser IDE for newcomers to the world of programming. I would like to leverage browser-friendly git libraries ......
Read more >Clarification on CORS limitations · Issue #62061 - GitHub
Hello — it would be nice to get some clarification on CORS limitations when serving static website pages from Azure Storage.
Read more >Clarification on CORS preflight fetches for TLS client certificates
When the server/peer requests a client certificate, the client performing the CORS check has two possible options available to them: Treat the server's ......
Read more >Specification does not require CORS for .well-known file #2013
In these cases, the homeserver should respond to pre-flight requests and supply Cross-Origin Resource Sharing (CORS) headers on all requests.
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
As far as I know, they never responded. The joys of putting all our open source ecosystem in the hands of a closed-source company. Maybe we should reach out again now that they are part of Microsoft? Anyone have good contacts there?
Credentials would be needed for private repos or pushing changes. But currently I can’t even read public repos without CORS enabled on their end.