Re: The HTTP Origin Header (draft-abarth-origin)

On Sat, Jan 24, 2009 at 3:27 PM, Bil Corry <bil@corry.biz> wrote:
> Doesn't XHR2 send the Origin header for GET?  That's prohibited by Adam's Origin draft,

That is not prohibited by the draft.  The draft has only positive
requirements on sending the Origin header.

> so either way, the Origin header discussed here will not exactly match the Origin header as provided by XHR2 via Access Control.

One of our goals is to have the Origin header used by XHR2 via Access
Control comply with the requirements of this draft.

Adam

Received on Saturday, 24 January 2009 23:31:45 UTC