Re: [cors] Failed sharing check and cookies

On Mon, 10 Oct 2011, Jonas Sicking wrote:
> 
> This will however be non-trivial to implement in Gecko as our HTTP layer 
> does the cookie handling, but the CORS implementation is built on top of 
> the HTTP layer.

That's essentially the same reason the spec does it too. Cookie setting is 
handled at the "network layer" (the fetch algorithm, which is built 
directly on top of HTTP), and CORS is built on top of that, and <img> and 
XHR are built on top of CORS.

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Tuesday, 11 October 2011 06:47:37 UTC