W3C home > Mailing lists > Public > public-webapps@w3.org > January to March 2010

Re: [XHR2] AnonXMLHttpRequest()

From: Anne van Kesteren <annevk@opera.com>
Date: Mon, 01 Feb 2010 11:25:11 +0100
To: "Jonas Sicking" <jonas@sicking.cc>
Cc: "WebApps WG" <public-webapps@w3.org>
Message-ID: <op.u7f1v9db64w2qv@annevk-t60>
On Mon, 01 Feb 2010 03:45:54 +0100, Jonas Sicking <jonas@sicking.cc> wrote:
> On Sun, Jan 31, 2010 at 1:50 PM, Anne van Kesteren <annevk@opera.com>  
> wrote:
>> I'm not really convinced we need all of
>>
>>  http://dev.w3.org/2006/waf/UMP/
>>
>> to handle the simple use case it is for. I think UMP can be layered on  
>> top
>> of CORS by simply letting the origin be a unique identifier and always  
>> have
>> the credentials flag be false. A new constructor could be used for
>> XMLHttpRequest -- maybe called AnonXMLHttpRequest() -- to enable this
>> behavior.
>>
>> Since most people in the WG seem to think we should have both UMP and  
>> CORS
>> this solution seems much more straightforward and practical.
>>
>> Thoughts?
>
> What do you mean by "unique identifier"?

The same as HTML5? I.e. something that results in Origin: null.


-- 
Anne van Kesteren
http://annevankesteren.nl/
Received on Monday, 1 February 2010 10:25:46 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:36 GMT