W3C home > Mailing lists > Public > public-webapi@w3.org > November 2007

Re: [xhr] cross site proposal headers

From: Anne van Kesteren <annevk@opera.com>
Date: Mon, 26 Nov 2007 11:48:44 +0100
To: "Jonas Sicking" <jonas@sicking.cc>, "Web APIs WG" <public-webapi@w3.org>
Message-ID: <op.t2eazio164w2qv@annevk-t60.oslo.opera.com>

On Mon, 23 Jul 2007 10:46:07 +0200, Jonas Sicking <jonas@sicking.cc> wrote:
>> [...]
>
> Oh, I was going to add to this. I plan on allowing "Accept" and  
> "Accept-Language" to be set even for cross-site requests. Are there  
> other headers that people think would be useful and safe to allow?

I added this to the specification now:

   http://dev.w3.org/2006/webapi/XMLHttpRequest-2/

(setRequestHeader() has a note to that effect and the send() algorithm  
enforces it.)


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>
Received on Monday, 26 November 2007 10:48:36 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:58 GMT