Re: XHR security risks from Boris Zbarsky on 2006-06-08 (public-webapi@w3.org from June 2006)

From: Boris Zbarsky <bzbarsky@mit.edu>
Date: Thu, 08 Jun 2006 10:38:56 -0500
To: Julian Reschke <julian.reschke@gmx.de>
CC: Charles McCathieNevile <chaals@opera.com>, Public Web API <public-webapi@w3.org>
Message-ID: <44884490.80905@mit.edu>

Julian Reschke wrote:
> Well, what I'm concerned with is form.submit() and XHR/PUT/DELETE in 
> things like onload events.

Yes, I'm aware of your position.  My mail was a response to a specific statement 
that Charles made, not a general response to the whole thread.

-Boris

Received on Thursday, 8 June 2006 15:39:08 UTC