Re: linking pre-check to POST and other requests? from Anne van Kesteren on 2008-01-18 (public-appformats@w3.org from January 2008)

From: Anne van Kesteren <annevk@opera.com>
Date: Fri, 18 Jan 2008 12:28:29 +0100
To: "Jonas Sicking" <jonas@sicking.cc>
Cc: "WAF WG (public)" <public-appformats@w3.org>
Message-ID: <op.t44h5rql64w2qv@annevk-t60.oslo.opera.com>

On Fri, 18 Jan 2008 05:02:04 +0100, Jonas Sicking <jonas@sicking.cc> wrote:
> I think this is a good point though. It's something that we should add  
> to the security considerations so that server implementations are aware  
> of this.

Added an encouragement for authors to check the Referer-Root header to the  
specification warning for race conditions during a policy change.

-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>

Received on Friday, 18 January 2008 11:25:31 UTC