Re: [CORS] Multiple origin values?

On Mon, 27 Sep 2010 15:02:22 +0200, Vladimir Dzhuvinov  
<vladimir@dzhuvinov.com> wrote:
> Thanks, Anne. I suspect they got confused by the other CORS headers
> that are comma separated. I also nearly fell into this trap, but thank
> god, the draft-abarth-origin-07 was still fresh in my head. I suppose
> it might be helpful to add an example with multiple origin URLs at the
> bottom to minimise the risk of misunderstanding.
>
> Also, it could somewhat help if the contents of sections 5.1.2 and
> 5.2.2 were made identical.

The situation is not identical. Preflight requests never come with a  
space-separated Origin header value. I added a note to clarify this.


-- 
Anne van Kesteren
http://annevankesteren.nl/

Received on Wednesday, 17 November 2010 14:20:15 UTC