Fixing IE10 CORS test.

Fixing IE10 CORS test.

BUG=

Committed: https://code.google.com/p/dart/source/detail?r=20126

[blois, 2013-03-13 18:30:47]

Was investigating bug 9005 about requests failing on IE10, was able to get this
test passing on IE10.

There appears to be an IE10 bug around the Origin header, I know Martin
originally did not like adding 'Access-Control-Allow-Origin: *', but I'm not
sure if there's a better way to do this (without sending the Origin as payload
date in the request).

[Emily Fortuna, 2013-03-13 18:56:54]

lgtm

[blois, 2013-03-15 23:35:27]

Committed patchset #1 manually as r20126 (presubmit successful).

[kustermann, 2013-03-16 22:41:19]

Sorry for the late reply.

https://codereview.chromium.org/12625006/diff/1/tools/testing/dart/http_serve...
File tools/testing/dart/http_server.dart (right):

https://codereview.chromium.org/12625006/diff/1/tools/testing/dart/http_serve...
tools/testing/dart/http_server.dart:281: allowedOrigin = '*';
I think this is not the right approach:

You know probably more about CORS/... than I do, but AFAIK browsers should set
the 'Origin' header when they do a cross domain request. And servers (like this
http server) should be able to depend on 'Origin' -- if 'Origin' was not given a
server may want to deny access (and that is a sane behaviour).

If IE10 misbehaves sometimes then we should not change the test or the http
server. Instead we should mark the test in the status file as failing on IE10
and add a comment which says that IE10 is broken and causes the test to fail.