W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2010

Re: [CORS] What constitutes a "network error"?

From: Jonas Sicking <jonas@sicking.cc>
Date: Wed, 21 Jul 2010 14:54:43 -0700
Message-ID: <AANLkTimciUahjLtUUo_WWHFX6gpvVK0QA9yIqf2GzkkV@mail.gmail.com>
To: Alexey Proskuryakov <ap@webkit.org>
Cc: Webapps WG <public-webapps@w3.org>
On Wed, Jul 21, 2010 at 1:14 PM, Alexey Proskuryakov <ap@webkit.org> wrote:
>
> 20.07.2010, в 14:37, Jonas Sicking написал(а):
>
>> However I haven't been able to find a clear definition of what counts
>> as a "network error". Does this include successful HTTP requests that
>> return 4xx or 5xx status codes? Or just errors in the lower level of
>> the stack, such as aborted TCP connections?
>
>
> FWIW, I've been always assuming the latter. Blocking 4xx and 5xx responses would mean having a rather unexpected difference between same origin and cross origin XMLHttpRequest (the former lets JS code see such responses).

I'm fairly certain that when we discussed this at the F2F in Redmond,
we talked about 4xxs aways resulting in failed requests. And that this
solved some security issues.

However I could be misremembering, or we could have changed our minds later.

Definitely would like to hear others speak up.

/ Jonas
Received on Wednesday, 21 July 2010 21:55:35 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:40 GMT