W3C home > Mailing lists > Public > public-web-security@w3.org > June 2011

Re: Proposed change: "xhr-src" to "connect"

From: Brandon Sterne <bsterne@mozilla.com>
Date: Mon, 27 Jun 2011 15:11:16 -0700
Message-ID: <4E090004.2080409@mozilla.com>
To: Adam Barth <w3c@adambarth.com>
CC: "public-web-security@w3.org" <public-web-security@w3.org>
I did consider that, but I wasn't sure that -src was the appropriate
suffix, because these are hosts that the page can connect *to*.  I do
agree that these APIs should be subject to default-src, though, so maybe
for consistency we should change it to connect-src.  I'm not opposed to
that change if people prefer it.

-Brandon

On 06/26/2011 01:59 PM, Adam Barth wrote:
> Would "connect" be subject to "default-src" ?  It seems like it
> should, but it doesn't have "src" in the name...
> 
> Adam
Received on Monday, 27 June 2011 22:11:36 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:19 UTC