Re: Extension HTTP methods

On Sat, 10 Jun 2006, Julian Reschke wrote:
> >
> > it's very hard for this group and the browser vendors to agree upon 
> > behaviour. E.g. should an entity-body be passed with the verb? How 
> > should the browser handle content negotiation?
> 
> Disagreement here. XHR implementations do not need any special knowledge 
> about this. If a client supplies a request body, it should be sent. No 
> problem here.

Wouldn't sending a body with a method that doesn't allow a body result in 
allowing request smuggling?

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'

Received on Sunday, 11 June 2006 18:51:02 UTC