Re: Do we need to rename the Origin header?

Brandon Sterne wrote on 4/6/2009 3:34 PM: 
> I'm adding Sid, who has been editing the document:
> https://wiki.mozilla.org/Security/Origin
> 
> As is mentioned in the first section of that document, the name of the
> proposed header is subject to change.

If you're going for an entirely new header, then you should consider adding the redirect path as well to it:

	Origin: <origin host> <frame-ancestor>*[, <redirect-host>]*

So site A frames B which frames C that then POSTs to D, which redirects to E which redirects to F becomes:

	Origin: C B A, D, E


- Bil