W3C home > Mailing lists > Public > public-webapi@w3.org > June 2006

Re: Extension HTTP methods

From: Ian Hickson <ian@hixie.ch>
Date: Sun, 11 Jun 2006 18:50:41 +0000 (UTC)
To: Julian Reschke <julian.reschke@gmx.de>
Cc: Gorm Haug Eriksen <gormer@opera.com>, "Hallvord R. M. Steen" <hallvord@opera.com>, Mark Nottingham <mnot@yahoo-inc.com>, Mark Baker <distobj@acm.org>, Anne van Kesteren <annevk@opera.com>, Pete Kirkham <mach.elf@gmail.com>, "Web APIs WG (public)" <public-webapi@w3.org>
Message-ID: <Pine.LNX.4.62.0606111848050.18156@dhalsim.dreamhost.com>

On Sat, 10 Jun 2006, Julian Reschke wrote:
> >
> > it's very hard for this group and the browser vendors to agree upon 
> > behaviour. E.g. should an entity-body be passed with the verb? How 
> > should the browser handle content negotiation?
> 
> Disagreement here. XHR implementations do not need any special knowledge 
> about this. If a client supplies a request body, it should be sent. No 
> problem here.

Wouldn't sending a body with a method that doesn't allow a body result in 
allowing request smuggling?

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'
Received on Sunday, 11 June 2006 18:51:02 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:55 GMT