Web server request identification

1. A method performed at a proxy server, the method comprising:

receiving a wrapped request;

finding a cross-origin resource sharing restriction in the wrapped request;

determining the wrapped request includes a file download request; and

adding metadata to a response, the response corresponding with the wrapped request, the metadata indicating removal of the cross-origin resource sharing restriction by adding a CORS header.

2. The method of claim 1 wherein the proxy server includes a reverse proxy server.

3. The method of claim 1 further comprising the proxy server directing traffic between a client and a webserver.

4. The method of claim 1 wherein the request includes an AJAX request.

5. The method of claim 4 wherein the AJAX request includes an XMLHttpRequest object.

6. The method of claim 4 wherein the AJAX request includes a fetch method.

7. The method of claim 4 wherein the AJAX request includes the cross-origin resource sharing restriction.

8. The method of claim 1 further comprising reading the response, and wherein the metadata includes metadata based on reading the response.

9. The method of claim 1 wherein adding metadata to the response includes adding a header to the response.

10. The method of claim 1 further comprising reading the response corresponding with the wrapped request.

11. A first computer readable storage device which stores first computer executable instructions which upon execution control a first processor at a proxy server to perform:

receiving a wrapped request;

finding in the wrapped request a cross-origin resource sharing restriction;

and

adding response metadata indicating a removal of the cross-origin resource sharing restriction by adding a CORS header.

12. The first computer readable storage device of claim 11 in combination with a second computer readable storage device which stores second computer executable instructions which upon execution control a second processor at a client to perform:

wrapping the request from the client to the webserver, thereby creating the wrapped request;

including in the wrapped request the cross-origin resource sharing restriction;

including in the wrapped request the file download request; and

sending the wrapped request with the cross-origin resource sharing restriction and the file download request toward the webserver.

13. The computer readable storage devices of claim 12 , wherein the request includes an AJAX request.

14. The computer readable storage devices of claim 12 wherein the first computer executable instructions or the second computer executable instructions or both comprise instructions which upon execution route traffic between the client and the webserver.

15. A system, comprising:

a memory device to store a set of instructions; and

a processor to execute the set of instructions which upon execution:

wrap a request from a client to a webserver, thereby creating a wrapped request at the client;

read the wrapped request at a proxy server and determine the wrapped request includes a file download request;

find a cross-origin resource sharing restriction in the wrapped request at the proxy server; and

add metadata at the proxy server to a response from the webserver to the client, the response corresponding with the wrapped request, the metadata indicating removal of the cross-origin resource sharing restriction by adding a CORS header.

16. The system of claim 15 wherein the instructions are implemented with a security service.

17. The system of claim 16 wherein the security service includes a cloud access security broker.

18. The system of claim 17 wherein the cloud access security broker enforces security policies.

19. The system of claim 16 wherein the security service logs access of the web server.

20. The system of claim 15 wherein the proxy server includes a reverse proxy server configured to direct web traffic between the client and the webserver.