W3C home > Mailing lists > Public > public-webapps@w3.org > October to December 2010

Re: [CORS] Multiple origin values?

From: Anne van Kesteren <annevk@opera.com>
Date: Wed, 17 Nov 2010 15:19:37 +0100
To: "Vladimir Dzhuvinov" <vladimir@dzhuvinov.com>
Cc: public-webapps <public-webapps@w3.org>
Message-ID: <op.vmbjezx964w2qv@anne-van-kesterens-macbook-pro.local>
On Mon, 27 Sep 2010 15:02:22 +0200, Vladimir Dzhuvinov  
<vladimir@dzhuvinov.com> wrote:
> Thanks, Anne. I suspect they got confused by the other CORS headers
> that are comma separated. I also nearly fell into this trap, but thank
> god, the draft-abarth-origin-07 was still fresh in my head. I suppose
> it might be helpful to add an example with multiple origin URLs at the
> bottom to minimise the risk of misunderstanding.
> Also, it could somewhat help if the contents of sections 5.1.2 and
> 5.2.2 were made identical.

The situation is not identical. Preflight requests never come with a  
space-separated Origin header value. I added a note to clarify this.

Anne van Kesteren
Received on Wednesday, 17 November 2010 14:20:15 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:13:13 UTC