Re: XHR: restrictions on request headers

Ian Hickson wrote:
> But I would add one more. Authors are stupid. We shouldn't provide them 
> with features whose only possible use is for them to shoot themselves in 
> the foot. In other words, I would phrase the question not as "which 
> headers should we restrict", but "which headers should we allow", and only 
> allow those that have valid use cases.

This sounds like what I suggested. But are there really any headers 
"whose only possible use is for them to shoot themselvs in the foot"?

/ Jonas

Received on Tuesday, 11 April 2006 23:52:28 UTC