XMLHttpRequest adds the origin header to patch requests

rbri · rbri · commit 40704b3fca41 · 2026-04-20T12:47:44.000+02:00
diff --git a/src/main/java/org/htmlunit/javascript/host/xml/XMLHttpRequest.java b/src/main/java/org/htmlunit/javascript/host/xml/XMLHttpRequest.java
@@ -715,7 +715,6 @@ public void open(final String method, final Object urlParam, final Object asyncP
             else {
                 isSameOrigin_ = UrlUtils.isSameOrigin(pageUrl, fullUrl);
                 final boolean alwaysAddOrigin = HttpMethod.GET != request.getHttpMethod()
-                                                && HttpMethod.PATCH != request.getHttpMethod()
                                                 && HttpMethod.HEAD != request.getHttpMethod();
                 if (alwaysAddOrigin || !isSameOrigin_) {
                     final StringBuilder origin = new StringBuilder().append(pageUrl.getProtocol()).append("://")
diff --git a/src/test/java/org/htmlunit/javascript/host/xml/XMLHttpRequestTest.java b/src/test/java/org/htmlunit/javascript/host/xml/XMLHttpRequestTest.java
@@ -1472,11 +1472,7 @@ public void originHeaderDelete() throws Exception {
      * @throws Exception if the test fails
      */
     @Test
-    @Alerts({"§§URL§§/", "null", "null"})
-    @HtmlUnitNYI(CHROME = {"§§URL§§/foo.xml", "null", "null"},
-            EDGE = {"§§URL§§/foo.xml", "null", "null"},
-            FF = {"§§URL§§/foo.xml", "null", "null"},
-            FF_ESR = {"§§URL§§/foo.xml", "null", "null"})
+    @Alerts({"§§URL§§/foo.xml", "§§URL§§", "null"})
     public void originHeaderPatch() throws Exception {
         final String html = DOCTYPE_HTML
                 + "<html><head><script>\n"
