Re: [cors] Should browsers send non-user-controllable headers in Access-Control-Request-Headers? from Boris Zbarsky on 2011-12-22 (public-webapps@w3.org from October to December 2011)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Thu, 22 Dec 2011 11:08:04 -0500
To: public-webapps@w3.org
Message-ID: <4EF355E4.8010000@mit.edu>

On 12/22/11 6:17 AM, Benson Margulies wrote:
> Jarred, along the lines of my question of 'what is a user header',
> what spec would one read to learn that lower-casing was correct? I
> looked for it and did not find it in the CORS draft.

It's in both http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html and 
in http://www.w3.org/TR/2010/WD-cors-20100727/ (this last is the current 
TR version).

Just search for "lowercase".

-Boris

Received on Thursday, 22 December 2011 16:08:35 UTC