- From: Anne van Kesteren <annevk@opera.com>
- Date: Sat, 09 Feb 2008 13:38:17 +0100
- To: "Jonas Sicking" <jonas@sicking.cc>, "Ian Hickson" <ian@hixie.ch>
- Cc: "WAF WG (public)" <public-appformats@w3.org>
On Fri, 08 Feb 2008 20:25:13 +0100, Jonas Sicking <jonas@sicking.cc> wrote:
>> At this point it would make sense to rename the Method-Check-* headers
>> too. I recommend changing the "Method-Check-" part to
>> "Access-Control-", so that the headers are:
>> On requests from a client:
>> Access-Control-Origin
>> On responses to OPTIONS when the policy is elsewhere:
>> Access-Control-Policy-Path
>> On all other responses:
>> Access-Control
>> Access-Control-Max-Age
>> Access-Control-Policy-Path
>
> This seems somewhat simplified. The last two would only exist for
> OPTIONS replies, right? And they are both optional so neither might
> exist even there.
Yeah. It's more like this:
On requests from a client:
Access-Control-Origin
On responses to OPTIONS when the policy is elsewhere:
Access-Control-Policy-Path
On responses to OPTIONS defining a policy path:
Access-Control
Access-Control-Max-Age (optional)
Access-Control-Policy-Path
On responses to OPTIONS:
Access-Control
Access-Control-Max-Age (optional)
On other responses:
Access-Control
--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>
Received on Saturday, 9 February 2008 12:34:32 UTC