- From: Philippe Le Hegaret <plh@w3.org>
- Date: Mon, 25 Jul 2011 11:13:37 -0400
- To: public-web-security@w3.org
This might be of interest for individuals here.
The Resource Timing specification defines an interface for web
applications to access timing information related to external resources
(such HTML images, videos, style sheets, scripts, etc.).
In order to allow access to timing information relation to cross-origin
resources, the specification introduces the following HTTP header:
[[
Timing-Allow-Origin Response Header
The Timing-Allow-Origin header indicates whether a resource's timing can
be shared based by returning the value of the Origin request header in
the response. ABNF:
Timing-Allow-Origin = "Timing-Allow-Origin" ":" origin-list-or-null | "*"
origin-list-or-null is defined by The HTTP Origin Header. [ORIGIN]
]]
http://www.w3.org/TR/2011/WD-resource-timing-20110524/#cross-origin-resources
Feedback is welcome to public-web-perf@w3.org.
Philippe
Received on Monday, 25 July 2011 15:13:47 UTC