W3C home > Mailing lists > Public > public-web-security@w3.org > June 2011

Re: Proposed change: "xhr-src" to "connect"

From: Brandon Sterne <bsterne@mozilla.com>
Date: Wed, 29 Jun 2011 10:59:13 -0700
Message-ID: <4E0B67F1.5060402@mozilla.com>
To: Adam Barth <w3c@adambarth.com>
CC: "public-web-security@w3.org" <public-web-security@w3.org>
On 06/27/2011 03:11 PM, Brandon Sterne wrote:
> I did consider that, but I wasn't sure that -src was the appropriate
> suffix, because these are hosts that the page can connect *to*.  I do
> agree that these APIs should be subject to default-src, though, so maybe
> for consistency we should change it to connect-src.  I'm not opposed to
> that change if people prefer it.
> -Brandon

It doesn't seem like there are strong opinions on the naming, so I'll
make the change to the spec that swaps xhr-src for connect-src and it
will be subject to the default-src list if absent.

Received on Wednesday, 29 June 2011 17:59:28 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:26:19 UTC