{"action":"created","issue":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/49","labels_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/49/comments","events_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/49/events","html_url":"https://github.com/EFForg/https-everywhere/issues/49","id":24971427,"number":49,"title":"Causes issue with Access-Control-Allow-Origin:*","user":{"login":"danielchatfield","id":1058676,"avatar_url":"https://avatars.githubusercontent.com/u/1058676?v=3","gravatar_id":"","url":"https://api.github.com/users/danielchatfield","html_url":"https://github.com/danielchatfield","followers_url":"https://api.github.com/users/danielchatfield/followers","following_url":"https://api.github.com/users/danielchatfield/following{/other_user}","gists_url":"https://api.github.com/users/danielchatfield/gists{/gist_id}","starred_url":"https://api.github.com/users/danielchatfield/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danielchatfield/subscriptions","organizations_url":"https://api.github.com/users/danielchatfield/orgs","repos_url":"https://api.github.com/users/danielchatfield/repos","events_url":"https://api.github.com/users/danielchatfield/events{/privacy}","received_events_url":"https://api.github.com/users/danielchatfield/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/EFForg/https-everywhere/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":18,"created_at":"2014-01-02T16:00:57Z","updated_at":"2015-08-22T15:18:30Z","closed_at":null,"body":"Browser: chrome\r\nExample (~~may be fixed soon though~~ Fixed by using https directly): http://yeoman.io/community-generators.html\r\n\r\nPage tries to load http://yeoman-generator-list.herokuapp.com/ which results in: `XMLHttpRequest cannot load http://yeoman-generator-list.herokuapp.com/. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://yeoman.io' is therefore not allowed access. `.\r\n\r\nIf the page requests the https version directly then it works."},"comment":{"url":"https://api.github.com/repos/EFForg/https-everywhere/issues/comments/133714945","html_url":"https://github.com/EFForg/https-everywhere/issues/49#issuecomment-133714945","issue_url":"https://api.github.com/repos/EFForg/https-everywhere/issues/49","id":133714945,"user":{"login":"TheNavigat","id":4323539,"avatar_url":"https://avatars.githubusercontent.com/u/4323539?v=3","gravatar_id":"","url":"https://api.github.com/users/TheNavigat","html_url":"https://github.com/TheNavigat","followers_url":"https://api.github.com/users/TheNavigat/followers","following_url":"https://api.github.com/users/TheNavigat/following{/other_user}","gists_url":"https://api.github.com/users/TheNavigat/gists{/gist_id}","starred_url":"https://api.github.com/users/TheNavigat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheNavigat/subscriptions","organizations_url":"https://api.github.com/users/TheNavigat/orgs","repos_url":"https://api.github.com/users/TheNavigat/repos","events_url":"https://api.github.com/users/TheNavigat/events{/privacy}","received_events_url":"https://api.github.com/users/TheNavigat/received_events","type":"User","site_admin":false},"created_at":"2015-08-22T15:18:30Z","updated_at":"2015-08-22T15:18:30Z","body":"Just reminding everyone that the issue still exists.\r\n\r\nThis might be the closest I got to reproducing it. http://origin-static.gamespot.com/js/modals.json\r\n\r\nUsing Chrome inspector I found that the response headers are different, depending on whether the extension is enabled or not.\r\n\r\nThese are the headers with the extension enabled.\r\n\r\nHTTP/1.1 200 OK\r\nContent-Type: application/json; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.17\r\nCache-Control: no-cache, private\r\nServer: nginx/1.2.0\r\nVary: Accept-Encoding\r\nDate: Sat, 22 Aug 2015 15:17:00 GMT\r\nX-TX-ID: 882debef-d7c8-4efa-85ad-f407b05eaa52\r\nX-Phoenix-Id: 55d8926bd79fd\r\nX-Varnish: 35127409\r\nAge: 0\r\nVia: 1.1 varnish-v4\r\nX-Cache-Debug-Served-By: ws420.phx2.cbsig.net\r\nX-Cache-Debug-Result: miss\r\nX-Cache-Device: other\r\nX-Cache-Region: us-uk\r\nX-Cache-AB: 38-0|42-0|44-0|45-0|47-0|50-0|52-0|53-0\r\nSet-Cookie: vguid=f69bf9fb-572d-4660-9757-62243fa7d213; path=/\r\nContent-Encoding: gzip\r\n\r\nAnd these are the headers with the extension disabled.\r\n\r\nHTTP/1.1 200 OK\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/5.4.17\r\nServer: nginx/1.2.0\r\nVary: Accept-Encoding\r\nX-TX-ID: 76e69086-e19d-407e-b83d-04b83136f8b8\r\nX-Phoenix-Id: 55d891ad1146e\r\nX-Varnish: 33161980\r\nX-Cache-Debug-Served-By: ws420.phx2.cbsig.net\r\nX-Cache-Debug-Result: miss\r\nX-Cache-Device: other\r\nX-Cache-Region: us-uk\r\nX-Cache-AB: 38-0|42-0|44-0|45-0|47-0|50-0|52-0|53-0\r\nContent-Encoding: gzip\r\nCache-Control: private, max-age=2592000\r\nDate: Sat, 22 Aug 2015 15:13:49 GMT\r\nContent-Length: 1357\r\nConnection: keep-alive\r\nSet-Cookie: vguid=6283bcd1-d1c1-4ee6-b404-65e49d14a1bb; path=/\r\naccess-control-allow-origin: *"}}