Re: [cors-tests] Add 304 tests for CORS (#1400)

http://lists.w3.org/Archives/Public/public-webappsec/2013Dec/thread.html#msg5 was the thread. At the start the suggestion seems to be to require headers just as for redirects, but near the end it seems that since the cached resource is used that is okay. However, 304 can update the cached resource as well which might have some unforeseen communication channels.

View on GitHub: https://github.com/w3c/web-platform-tests/pull/1400#issuecomment-66911106

Received on Sunday, 14 December 2014 12:10:41 UTC