W3C home > Mailing lists > Public > public-webapi@w3.org > September 2007

Re: XHR: definition of same-origin

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Wed, 26 Sep 2007 08:51:45 -0500
Message-ID: <46FA63F1.3030702@mit.edu>
To: Anne van Kesteren <annevk@opera.com>
CC: Maciej Stachowiak <mjs@apple.com>, "Web API WG (public)" <public-webapi@w3.org>

Anne van Kesteren wrote:
> Thanks. So it say the that the origin of the Document object associated 
> with the Window pointer is the origin of the request. With a reference 
> to HTML5 to see what the origin of such a Document object actually is. 
> Or should it simply be the origin of the script?

Those are possibly different origins when someone is doing something like:

   window.frames[0].XMLHttpRequest

right?  I agree that it's important to decide which origin to use in this case.

-Boris
Received on Wednesday, 26 September 2007 13:52:23 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:58 GMT