W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2011

Re: From-Origin FPWD

From: J Ross Nicoll <jrn@jrn.me.uk>
Date: Fri, 22 Jul 2011 16:52:36 +0100
To: WebApps WG <public-webapps@w3.org>
Message-ID: <CA4F5A8F.CF29%jrn@jrn.me.uk>
In my opinion, we should not be supporting X-* headers any more than
absolutely necessary, so phasing out X-Frame-Options in preference of
From-Origin would be the correct way to go. I'm aware this does mean a
cross-over period where servers are likely to have to provide both
headers, and it might be worth specifying what is expected if both are
present and conflict (use From-Origin in preference to X-Frame-Options,
perhaps).

Ross

On 22/07/2011 16:08, "Anne van Kesteren" <annevk@opera.com> wrote:

>Hi,
>
>The WebApps WG published the From-Origin header proposal as FPWD:
>
>   http://www.w3.org/TR/from-origin/
>
>The main open issue is whether X-Frame-Options should be replaced by this
> 
>header or should absorb its functionality somehow.
>
>Cheers,
>
>
>-- 
>Anne van Kesteren
>http://annevankesteren.nl/
>
Received on Friday, 22 July 2011 15:53:31 GMT

This archive was generated by hypermail 2.3.1 : Tuesday, 26 March 2013 18:49:46 GMT