W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2010

Re: [cors] Allow-Credentials vs Allow-Origin: * on image elements?

From: Anne van Kesteren <annevk@opera.com>
Date: Thu, 08 Jul 2010 11:38:27 +0200
To: "Charlie Reis" <creis@chromium.org>, "Mark S. Miller" <erights@google.com>
Cc: public-webapps@w3.org
Message-ID: <op.vfiqdxkt64w2qv@annevk-t60>
On Thu, 08 Jul 2010 01:04:53 +0200, Mark S. Miller <erights@google.com>  
> Why would public images or fonts need credentials?

I don't know about fonts, but <img> fetching has been done with  
credentials since dawn of time and changing that will have compatibility  
consequences. Making such requests go without credentials is orthogonal  
though to figuring out whether we want to allow the wildcard while the  
credentials flag is true.

Anne van Kesteren
Received on Thursday, 8 July 2010 09:39:19 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 20 October 2015 13:55:35 UTC