Re: XHR: definition of same-origin

Hallvord R. M. Steen wrote:
>> Note that document.domain (when set by both source and target frame) 
>> also lets you ignore port and protocol differences, which once again 
>> is not desirable for XHR.
> 
> I know we ignore port differences but I don't think we ignore protocol. 

That's Gecko's behavior as well: the document.domain value overrides the 
host and port of the URI, but does not change the scheme.

-Boris

Received on Thursday, 27 September 2007 03:49:34 UTC