W3C home > Mailing lists > Public > ietf-http-wg@w3.org > April to June 2009

Re: The HTTP Origin Header (draft-abarth-origin)

From: Henrik Nordstrom <henrik@henriknordstrom.net>
Date: Thu, 25 Jun 2009 03:57:25 +0200
To: Mark Nottingham <mnot@mnot.net>
Cc: Adam Barth <w3c@adambarth.com>, "Roy T. Fielding" <fielding@gbiv.com>, Larry Masinter <LMM@acm.org>, ietf-http-wg@w3.org, Lisa Dusseault <ldusseault@commerce.net>
Message-Id: <1245895045.24869.33.camel@localhost.localdomain>
tor 2009-06-25 klockan 11:29 +1000 skrev Mark Nottingham:
> Right -- and that's why we're modifying referer to allow about: blank.

Yes, I got that after sending my response. Didn't notice my mail agent
had jumped back 6 months (thought I was just one month back in the

> The question I have is whether this makes Referer adequate for the use  
> cases that the various W3C WGs have for Origin (assuming that they'll  
> place additional requirements on it).

I guess it also needs to extend the browser profile to allow abbreviated
Refererer header values in several cases where the browser sends none
today, such as when switching from https to http.

Received on Thursday, 25 June 2009 01:58:16 UTC

This archive was generated by hypermail 2.4.0 : Thursday, 2 February 2023 18:43:19 UTC