Re: on requiring origin request header?

On Thu, Jun 7, 2012 at 6:07 AM, Robin Berjon <robin@berjon.com> wrote:

> Hi Glenn,
>
> On Jun 7, 2012, at 00:00 , Glenn Adams wrote:
> > I noticed that Core Mobile Profile - Level 0 does mandate support for
> CORS (Section 5); however, it is my understanding that neither HTML5 nor
> CORS requires a UA to include an Origin header in a fetch request (whether
> a CORS or non-CORS fetch). I wonder if any further mandatory language is
> required to determine when an Origin header must or should be included in
> fetch request.
>
> It seems that we've shelved L0 anyway, so I'm afraid that question is
> immaterial until we see what's in L1 :)
>

it might be useful to put a warning at the beginning of the L0 draft
indicating this status