[Bug 9603] New: If the origin parameter does not match the Document origin the Referer header should also be excluded. Alternatively a way to omit the Referer header would be good for CORS.

http://www.w3.org/Bugs/Public/show_bug.cgi?id=9603

           Summary: If the origin parameter does not match the Document
                    origin the Referer header should also be excluded.
                    Alternatively a way to omit the Referer header would
                    be good for CORS.
           Product: HTML WG
           Version: unspecified
          Platform: Other
               URL: http://www.whatwg.org/specs/web-apps/current-work/#fet
                    ching-resources
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P3
         Component: HTML5 spec bugs
        AssignedTo: dave.null@w3.org
        ReportedBy: contributor@whatwg.org
         QAContact: public-html-bugzilla@w3.org
                CC: ian@hixie.ch, mike@w3.org, public-html@w3.org,
                    annevk@opera.com


Section: http://www.whatwg.org/specs/web-apps/current-work/#fetching-resources

Comment:
If the origin parameter does not match the Document origin the Referer header
should also be excluded. Alternatively a way to omit the Referer header would
be good for CORS.

Posted from: 58.1.224.28 by annevk@opera.com

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Wednesday, 28 April 2010 08:11:16 UTC