W3C home > Mailing lists > Public > public-webapi@w3.org > April 2008

XHR LC Draft Feedback

From: Sunava Dutta <sunavad@windows.microsoft.com>
Date: Tue, 15 Apr 2008 14:59:14 -0700
To: Anne van Kesteren <annevk@opera.com>
CC: "public-webapi@w3.org" <public-webapi@w3.org>, Gideon Cohn <gidco@windows.microsoft.com>, Ahmed Kamel <Ahmed.Kamel@microsoft.com>, Zhenbin Xu <zhenbinx@windows.microsoft.com>, Doug Stamper <dstamper@exchange.microsoft.com>
Message-ID: <083D18C6B9B71F4CBCA7B76D97B7483102C745255C@NA-EXMSG-W601.wingroup.windeploy.ntdev.microsoft.com> 
Good to see the draft move to LC.


*         Removed dependency on DOM Level 3 Events

*         Removed dependency on Window Object 1.0

*         Clearly marked which HTTP methods are to raise SECURITY_ERR



Thanks for the changes.




I noticed the draft (http://www.w3.org/TR/2008/WD-XMLHttpRequest-20080415/) has called out the restricted headers. This is great.
Perhaps it would be helpful to mention for each header, why they are restricted. It will help developers (and others concerned who are not security savvy) understand the security philosophy and also help to ensure that headers of equivalent function with different names are also submitted for consideration in this blocked list. (I don't have any that comes to mind currently).



--
Sunava Dutta
Program Manager (AJAX) - Developer Experience Team, Internet Explorer
One Microsoft Way, Redmond WA 98052
TEL# (425) 705-1418
FAX# (425) 936-7329
Received on Tuesday, 15 April 2008 21:59:25 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 15 April 2008 21:59:27 GMT