https://bz.apache.org/bugzilla/show_bug.cgi?id=67472
--- Comment #4 from lmedini <lmed...@protonmail.com> --- Well, this is precisely the point of Cross-Origin Resource Sharing (CORS). See for instance https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS CORS has been created so that servers can control how they respond to requests made by scripts from other origins than their own. Otherwise, they are same-origin requests and don't need the CORS mechanism. Abd this holds whether the application was obtained through a proxy or not. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org