Re: Proposed change: "xhr-src" to "connect"

• From: Brandon Sterne <bsterne@mozilla.com>
• Date: Mon, 27 Jun 2011 15:11:16 -0700
• To: Adam Barth <w3c@adambarth.com>
• CC: "public-web-security@w3.org" <public-web-security@w3.org>
• Message-ID: <4E090004.2080409@mozilla.com>

I did consider that, but I wasn't sure that -src was the appropriate
suffix, because these are hosts that the page can connect *to*.  I do
agree that these APIs should be subject to default-src, though, so maybe
for consistency we should change it to connect-src.  I'm not opposed to
that change if people prefer it.

-Brandon

On 06/26/2011 01:59 PM, Adam Barth wrote:
> Would "connect" be subject to "default-src" ?  It seems like it
> should, but it doesn't have "src" in the name...
> 
> Adam

Received on Monday, 27 June 2011 22:11:36 UTC