Access Control for Cross-site Requests

Anne van Kesteren

We want cross-site requests for XBL, XSLT, HTML 5 <event-source>, XMLHttpRequest, and probably more…

The GET Solution

Cross-site requests for XBL, XSLT, and <event-source> solved.

The Non-GET (POST, DELETE, …) Solution

Authentication request

Authentication request (continued)

Cross-site requests for XMLHttpRequest, and earlier mentioned technologies solved. is not up to date.