W3C home > Mailing lists > Public > public-webapps@w3.org > July to September 2010

[cors] Case-sensitive matching of origin URLs?

From: Vladimir Dzhuvinov <vladimir@dzhuvinov.com>
Date: Thu, 23 Sep 2010 09:40:42 +0300
Message-ID: <AANLkTimmSap8rjjckkUfHEgbkY3WHXaF5xxCeezp-_xU@mail.gmail.com>
To: public-webapps@w3.org

I'm writing a generic Java servlet filter to implement the current
CORS draft. I'm confused about the correct way to check if a reported
Origin is allowed by the resource's allow list.

The Origin spec, which the CORS draft refers to, implies that 2
origins are equal if they match, regardless of their case (upper or


The CORS draft on the other hand requires case-sensitive matching of origins:


Please, advise.

Vladimir Dzhuvinov :: software.dzhuvinov.com
Received on Friday, 24 September 2010 07:17:14 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:13:11 UTC