Re: on requiring origin request header?

Hi Glenn,

On Jun 7, 2012, at 00:00 , Glenn Adams wrote:
> I noticed that Core Mobile Profile - Level 0 does mandate support for CORS (Section 5); however, it is my understanding that neither HTML5 nor CORS requires a UA to include an Origin header in a fetch request (whether a CORS or non-CORS fetch). I wonder if any further mandatory language is required to determine when an Origin header must or should be included in fetch request.

It seems that we've shelved L0 anyway, so I'm afraid that question is immaterial until we see what's in L1 :)

-- 
Robin Berjon - http://berjon.com/ - @robinberjon

Received on Thursday, 7 June 2012 12:07:30 UTC