Incorrect CORS Support in TROCustomHTTPServer


I use RemObjects Remoting SDK - and met the CORS problem in TROCustomHTTPServer.

Cross-Origin Resource Sharing (CORS) - HTTP | MDN (find the text “Once the preflight request is complete, the real request is sent” as a tag) states that the header

Access-Control-Allow-Origin: <origin> | *

must be present for both kinds of responses

  • preflight request (OPTIONS)
  • real request (POST, PUT, …)

However, the method TROCustomHTTPServer.DoCORSSupport handles only OPTIONS request.

Q: Is it by design according to a HTTP spec? Or is a bug?

Best regards

Logged as bugs://D19162.

Logged as bugs://D19163.

bugs://D19162 was closed as fixed.


In what version will the bug fix be released?

Best regards


This fix will be in the next build made available, probably next week.

bugs://D19163 was closed as fixed.