Request Header

I made an interesting find. In firefox, there is a bug using ajax and ntlm authentication with IIS. After an initial authentication, the NTLM credentials should be cached and transmitted in the subsequent requests. On XMLHttpRequest requests, however, if a resource is nested, the header either is missing the credentials, or has it in an invalid format.
By nested, I mean for example that if there is a css file with links to images on the same IIS application, these subsequent requests will result in a 401.2 response. I have been able to duplicate this and have verified a workaround. The subsequent files in my case are images, and are wholy contained in an images folder, which I can configure for anonymous access. This removes the need to authenticate for the nested requests. Nevertheless, the bug remains.

Here is an excellent resource for configuring IIS for authentication.

1 Comment

1. Unknown on March 30, 2022 at 8:19 PM

   The Best Slots | Casino Roll
   The best slots at Casino https://deccasino.com/review/merit-casino/ Roll. 바카라 사이트 If you love table games, to play blackjack, you have to bet twice for the kadangpintar dealer to win. wooricasinos.info The dealer must gri-go.com