- From: Anne van Kesteren <annevk@opera.com>
- Date: Mon, 17 Mar 2008 23:12:59 +0100
- To: "Sunava Dutta" <sunavad@windows.microsoft.com>, "Maciej Stachowiak" <mjs@apple.com>, "Eric Lawrence" <ericlaw@exchange.microsoft.com>
- Cc: "Web API WG (public)" <public-webapi@w3.org>, "public-appformats@w3.org" <public-appformats@w3.org>, "Chris Wilson" <Chris.Wilson@microsoft.com>, "Zhenbin Xu" <zhenbinx@windows.microsoft.com>, "Gideon Cohn" <gidco@windows.microsoft.com>, "Sharath Udupa" <Sharath.Udupa@microsoft.com>, "Doug Stamper" <dstamper@exchange.microsoft.com>, "Marc Silbey" <marcsil@windows.microsoft.com>
On Mon, 17 Mar 2008 22:29:54 +0100, Sunava Dutta <sunavad@windows.microsoft.com> wrote: > There are many threats against a cross-domain communication mechanism, > so we believe the simplicity of XDR makes it more suitable than > attempting to plumb cross-domain capabilities into the existing XHR > object. In particular, we are concerned that attempting to introduce > new restrictions/added complexity on an XHR object when it is used in a > cross-domain manner will result in a confusing programming model for the > web developer. Could you elaborate on why you consider the proposed model to be confusing for Web developers? It's in fact as simple as: var client = new XMLHttpRequest() client.onreadystatechange = function() { ...} client.open("GET", "http://cross-site.example.org/resource") client.send() Indeed, as complex as normal usage of XMLHttpRequest. The model proposed doesn't just solve it for XMLHttpRequest, it can also be used for cross-site XSLT: <?xml-stylesheet href="http://cross-site.example.org/transform" type="application/xslt+xml"?> Again, no changes required in the way you initiate the request. The server-side is not much more complex than what has been proposed by Microsoft although a preflight request has to be handled by the server to ensure that the server is ok with custom methods, a request entity body, etc. -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>
Received on Monday, 17 March 2008 22:12:49 UTC