On Wed, 27 Sep 2006 20:14:53 +0200, Mark Baker <distobj@acm.org> wrote: > Yah - I recommended having the whitelist consist of just GET and POST. > I'm wary of much longer lists because it might suggest that we've > somehow vetted the operations, when that's not the case. I included PUT, DELETE and HEAD as well. HEAD is mentioned on multiple other locations and the other two are relevant for the case-insensitive matching. I'm about to check this in into the editor's draft. -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>Received on Saturday, 30 September 2006 15:34:47 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:55 GMT