W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2009

Re: [cors] TAG request concerning CORS & Next Step(s)

From: Jonas Sicking <jonas@sicking.cc>
Date: Wed, 24 Jun 2009 13:37:08 -0700
Message-ID: <63df84f0906241337r1b98ce2ev2cb801254ff5391b@mail.gmail.com>
To: Tyler Close <tyler.close@gmail.com>
Cc: Arthur Barstow <Art.Barstow@nokia.com>, public-webapps <public-webapps@w3.org>, Henry Thompson <ht@inf.ed.ac.uk> 
On Wed, Jun 24, 2009 at 12:52 PM, Tyler Close<tyler.close@gmail.com> wrote:
> Hi Jonas,
>
> I'm just asking what Origin header behavior will be shipped in Firefox
> 3.5. You've said redirects of preflighted requests aren't supported,
> so I'm wondering about the non-preflighted requests.

It will have the Origin header of the original request. We're
considering blocking the request entirely for now though.

> Another question, since Firefox doesn't support redirects of
> preflighted requests, what does it do when it encounters a redirect?

It aborts and denies the original request. For XHR that means raising
an error event.

/ Jonas
Received on Wednesday, 24 June 2009 20:38:12 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 20 October 2015 13:55:26 UTC