On Tue, 13 May 2008 07:42:59 +0200, Adam Barth <public-webapi@adambarth.com> wrote: > One option is to rename the header "Sec-Origin", which is already > blocked in XHR Level 1. True, but I think Access-Control-Origin is better as it more clearly indicates what it is related to. And since we can safely do it given that cross-site requests won't work for XMLHttpRequest until Access Control is implemented I think it's acceptable. -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>Received on Saturday, 24 May 2008 08:32:24 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Saturday, 24 May 2008 08:32:27 GMT