Re: [SVGMobile12] A.7.19 getURL and postURL

On Jan 27, 2006, at 7:52 AM, Boris Zbarsky wrote:

>
> Jonathan Watt wrote:
>> The phrase "restrict the domains" is too vague. Please change this  
>> to "restrict requests to the same origin as the SVG document".
>
> Actually, I think that would be too restrictive.  There are some  
> proposals on the table for allowing sites to control cross-origin  
> access to them that the wording you propose would make impossible.   
> "restrict the domains" seems correct to me here.

I think "restrict by origin" might be more accurate but sufficiently  
vague (in practice, port and URI scheme should be considered as well  
as domain name).

Regards,
Maciej

Received on Tuesday, 31 January 2006 07:22:28 UTC