Re: [cors] Allow-Credentials vs Allow-Origin: * on image elements?

On Thu, 08 Jul 2010 01:04:53 +0200, Mark S. Miller <erights@google.com>  
wrote:
> Why would public images or fonts need credentials?

I don't know about fonts, but <img> fetching has been done with  
credentials since dawn of time and changing that will have compatibility  
consequences. Making such requests go without credentials is orthogonal  
though to figuring out whether we want to allow the wildcard while the  
credentials flag is true.


-- 
Anne van Kesteren
http://annevankesteren.nl/

Received on Thursday, 8 July 2010 09:39:19 UTC