- From: Anne van Kesteren <annevk@opera.com>
- Date: Mon, 26 Nov 2007 11:48:44 +0100
- To: "Jonas Sicking" <jonas@sicking.cc>, "Web APIs WG" <public-webapi@w3.org>
On Mon, 23 Jul 2007 10:46:07 +0200, Jonas Sicking <jonas@sicking.cc> wrote: >> [...] > > Oh, I was going to add to this. I plan on allowing "Accept" and > "Accept-Language" to be set even for cross-site requests. Are there > other headers that people think would be useful and safe to allow? I added this to the specification now: http://dev.w3.org/2006/webapi/XMLHttpRequest-2/ (setRequestHeader() has a note to that effect and the send() algorithm enforces it.) -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>
Received on Monday, 26 November 2007 10:48:36 UTC