microsoft / microsoft/ApplicationInsights-JS
[BUG] Invalid HTTP response header sent with track event
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 685
- Forks
- 261
- Avg merge
- 21h 33m
- Merged PRs (30d)
- 5
Description
**Description/Screenshot**
The App Insights `track` call sometimes returns an invalid HTTP response header that triggers a message in dev tools. I suspect this has nothing to do with this repo, but I'm not sure where to report it.

`Invalid 'X-Frame-Options' header encountered when loading 'https://site.host.local/': 'allow' is not a recognized directive. The header will be ignored.`
**Steps to Reproduce**
Report an event which results in a call to the track endpoint (https://dc.services.visualstudio.com/v2/track)
- OS/Browser: Edge (Chromium)
- SDK Version [e.g. 22]:
- How you initialized the SDK:
**Expected behavior**
All HTTP response headers should be valid across browsers
`X-Frame-Options` only allows `DENY` or `SAMEORIGIN` (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options)
**Additional context**
Seen in Edge (Chromium) only so far. The header is completely missing in Chrome and Firefox (all current versions)
**Firefox**

**Chrome**

Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The report points to the track endpoint, https://dc.services.visualstudio.com/v2/track, rather than a repository file or test. Start by verifying its response headers in Edge and comparing Chrome and Firefox; the issue is complete when ownership of the invalid header and a reproducible result are established.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, typescript
- Domain
- api, observability
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100