W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2010

Re: [cors] Case-sensitive matching of origin URLs?

From: Adam Barth <w3c@adambarth.com>
Date: Fri, 24 Sep 2010 13:37:35 -0700
Message-ID: <AANLkTi=p+GHfGGDsdjA2JSChwSqbFgvXARjMz5u2hbZV@mail.gmail.com>
To: Anne van Kesteren <annevk@opera.com>
Cc: public-webapps@w3.org, Vladimir Dzhuvinov <vladimir@dzhuvinov.com>
On Fri, Sep 24, 2010 at 12:41 AM, Anne van Kesteren <annevk@opera.com> wrote:
> On Thu, 23 Sep 2010 08:40:42 +0200, Vladimir Dzhuvinov
> <vladimir@dzhuvinov.com> wrote:
>>
>> The CORS draft on the other hand requires case-sensitive matching of
>> origins:
>>
>> http://www.w3.org/TR/access-control/#resource-requests
>
> It requires case-sensitive matching of the serialization of origins. They
> are never parsed into origins to begin with.

Anne is correct.  CORS uses case-sensitive matching of the
serialization of origins.  It just so happens that whenever you
serialize an origin, you end up with something in lower case, but that
detail is too low-level for CORS to worry about.

Adam
Received on Friday, 24 September 2010 20:44:02 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:40 GMT