[access-control] Allowing HEAD

• From: Anne van Kesteren <annevk@opera.com>
• Date: Mon, 06 Oct 2008 16:56:51 +0200
• To: "WebApps WG" <public-webapps@w3.org>
• Message-ID: <op.uilyg1x464w2qv@annevk-t60.oslo.opera.com>

Pros:

* Doing the same for HEAD and GET is saner than requiring a preflight for  
HEAD.

* Makes cross-site HEAD easier.


Cons:

* Might complicate re-introduction of <?access-control?> or equivalent. As  
the headers could say allow while the body says not allow.


Given that it's probably worth allowing HEAD requests. I will make that  
change in the next few days.


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>

Received on Monday, 6 October 2008 14:57:33 UTC