W3C home > Mailing lists > Public > www-svg@w3.org > January 2006

Re: [SVGMobile12] A.7.19 getURL and postURL

From: Maciej Stachowiak <mjs@apple.com>
Date: Mon, 30 Jan 2006 23:18:52 -0800
Message-Id: <62D77C56-BC09-40BF-A1E9-A33AF3F476F2@apple.com>
Cc: Jonathan Watt <jwatt@jwatt.org>, www-svg@w3.org
To: Boris Zbarsky <bzbarsky@mit.edu>


On Jan 27, 2006, at 7:52 AM, Boris Zbarsky wrote:

>
> Jonathan Watt wrote:
>> The phrase "restrict the domains" is too vague. Please change this  
>> to "restrict requests to the same origin as the SVG document".
>
> Actually, I think that would be too restrictive.  There are some  
> proposals on the table for allowing sites to control cross-origin  
> access to them that the wording you propose would make impossible.   
> "restrict the domains" seems correct to me here.

I think "restrict by origin" might be more accurate but sufficiently  
vague (in practice, port and URI scheme should be considered as well  
as domain name).

Regards,
Maciej
Received on Tuesday, 31 January 2006 07:22:28 GMT

This archive was generated by hypermail 2.3.1 : Friday, 8 March 2013 15:54:33 GMT