Re: XHR: definition of same-origin from Boris Zbarsky on 2007-09-26 (public-webapi@w3.org from September 2007)

From: Boris Zbarsky <bzbarsky@MIT.EDU>
Date: Wed, 26 Sep 2007 08:51:45 -0500
To: Anne van Kesteren <annevk@opera.com>
CC: Maciej Stachowiak <mjs@apple.com>, "Web API WG (public)" <public-webapi@w3.org>
Message-ID: <46FA63F1.3030702@mit.edu>

Anne van Kesteren wrote:
> Thanks. So it say the that the origin of the Document object associated 
> with the Window pointer is the origin of the request. With a reference 
> to HTML5 to see what the origin of such a Document object actually is. 
> Or should it simply be the origin of the script?

Those are possibly different origins when someone is doing something like:

   window.frames[0].XMLHttpRequest

right?  I agree that it's important to decide which origin to use in this case.

-Boris

Received on Wednesday, 26 September 2007 13:52:23 UTC