Re: cookies and XMLHttpRequest

David Flanagan wrote:
> 
> Jonas Sicking wrote:
>> David Flanagan wrote:
>>
>>> Your XMLHttpRequest draft of 05 April 2006 specifies that 
>>> XMLHttpRequest should automatically include cookies in outgoing 
>>> requests.
>>>
>>> But it does not specify what should be done with cookies included in 
>>> incoming responses.
>>
>>
>> What does current implementations do? Are the cookies available 
>> through .responseXML.cookies? 
> 
> Hmm.  I didn't even think about that.  That's actually a pretty good 
> idea...
> 
> What I meant, however, was that you need to specify that the browser 
> must/should/should not store cookies sent with the response to an 
> XMLHttpRequest.

I'm not sure that we actually need to specify this. A UA supporting 
cookies should use them in any and all http transfers. If we go and 
specify how every possible web feature interact with XHR we're never 
going to get done.

/ Jonas

Received on Monday, 24 April 2006 05:15:10 UTC