W3C home > Mailing lists > Public > ietf-http-wg@w3.org > April to June 2009

Re: The HTTP Origin Header (draft-abarth-origin)

From: Henrik Nordstrom <henrik@henriknordstrom.net>
Date: Thu, 25 Jun 2009 03:57:25 +0200
To: Mark Nottingham <mnot@mnot.net>
Cc: Adam Barth <w3c@adambarth.com>, "Roy T. Fielding" <fielding@gbiv.com>, Larry Masinter <LMM@acm.org>, ietf-http-wg@w3.org, Lisa Dusseault <ldusseault@commerce.net>
Message-Id: <1245895045.24869.33.camel@localhost.localdomain>
tor 2009-06-25 klockan 11:29 +1000 skrev Mark Nottingham:
> Right -- and that's why we're modifying referer to allow about: blank.

Yes, I got that after sending my response. Didn't notice my mail agent
had jumped back 6 months (thought I was just one month back in the
list...)

> The question I have is whether this makes Referer adequate for the use  
> cases that the various W3C WGs have for Origin (assuming that they'll  
> place additional requirements on it).

I guess it also needs to extend the browser profile to allow abbreviated
Refererer header values in several cases where the browser sends none
today, such as when switching from https to http.

Regards
Henrik
Received on Thursday, 25 June 2009 01:58:16 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:04 GMT