CSP: set of report URIs from Anne van Kesteren on 2013-03-19 (public-webappsec@w3.org from March 2013)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Tue, 19 Mar 2013 07:16:10 -0400
To: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78hVaYDdYRq_9n7pvpf5yy9MHzDAkvu0_41+ONhKXwEJqg@mail.gmail.com>

Is this set of URLs guaranteed to be same-origin somehow? Doing a
cross-origin POST request with a JSON entity body is not something
either <form> or XMLHttpRequest with CORS can do so would require at
least a CORS preflight.


-- 
http://annevankesteren.nl/

Received on Tuesday, 19 March 2013 11:16:42 UTC