Timing-Allow-Origin test

This demonstrates using Timing-Allow-Origin with space-separated origins. To run the test:

git clone https://github.com/MicrosoftEdge/timing-allow-origin-test.git
cd timing-allow-origin-test
npm install
npm start

Then open up http://localhost:8000 and http://localhost:8001 in a browser.

What's going on

A subresource from localhost:8002 declares Timing-Allow-Origin: http://localhost:8000 http://localhost:8001. So a page served from either localhost:8000 or localhost:8001 should be able to get its full performance entry without anything zeroed out, assuming the browser supports the space-separated format.

Initial results

• Chrome 51: passes
• Edge 14: passes
• Firefox 49: fails