Re: XHR: restrictions on request headers

"Jonas Sicking" <jonas@sicking.cc>
> I'm not sure I understand the use case. Do you need to be able to send any 
> combination of headers as was repeated earlier by another UA? If so I 
> don't think we can ever archive that functionality since there will always 
> be some headers that we want to limit.

Limiting some for specific security reasons are fine - the browser will 
limit all of those regardless of what the spec says anyway - but limiting 
them for any other reason - stopping someone shooting them in the foot is 
not.  The vast majority of changing accept headers will work, as the 
browsers do support multiple encodings.

Jim. 

Received on Friday, 14 April 2006 08:16:06 UTC