Re: Proposed change: "xhr-src" to "connect" from Brandon Sterne on 2011-06-29 (public-web-security@w3.org from June 2011)

From: Brandon Sterne <bsterne@mozilla.com>
Date: Wed, 29 Jun 2011 10:59:13 -0700
To: Adam Barth <w3c@adambarth.com>
CC: "public-web-security@w3.org" <public-web-security@w3.org>
Message-ID: <4E0B67F1.5060402@mozilla.com>

On 06/27/2011 03:11 PM, Brandon Sterne wrote:
> I did consider that, but I wasn't sure that -src was the appropriate
> suffix, because these are hosts that the page can connect *to*.  I do
> agree that these APIs should be subject to default-src, though, so maybe
> for consistency we should change it to connect-src.  I'm not opposed to
> that change if people prefer it.
> 
> -Brandon

It doesn't seem like there are strong opinions on the naming, so I'll
make the change to the spec that swaps xhr-src for connect-src and it
will be subject to the default-src list if absent.

-Brandon

Received on Wednesday, 29 June 2011 17:59:28 UTC