W3C home > Mailing lists > Public > public-webapps@w3.org > April to June 2010

Re: CORS Last Call status/plans? [Was: Re: [UMP] Request for Last Call]

From: Bjoern Hoehrmann <derhoermi@gmx.net>
Date: Mon, 19 Apr 2010 09:11:45 +0200
To: Tyler Close <tyler.close@gmail.com>
Cc: public-webapps@w3.org
Message-ID: <jc0os550h31p2opm1rsitmp2s5917dj94c@hive.bjoern.hoehrmann.de>
* Tyler Close wrote:
>If Mozilla agrees to implement it, I'd like UMP to specify a new
>header named "U" whose value is either "*" or a list of allowed
>response headers. A response with this header is opting out of Same
>Origin Policy protection for both the response entity and the listed
>response headers. The response is not required to also include the
>Access-Control-Allow-Origin header, but can for compatibility with
>current implementations.

It is unlikely that a header "U" would be met with enthusiasm, as a
network administrator would not be able to discern from the name what
it is about, or use a search engine to find out about it, without
considerable effort at least.
-- 
Björn Höhrmann · mailto:bjoern@hoehrmann.de · http://bjoern.hoehrmann.de
Am Badedeich 7 · Telefon: +49(0)160/4415681 · http://www.bjoernsworld.de
25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/ 
Received on Monday, 19 April 2010 07:12:26 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:38 GMT