Re: CORS and local resources from Anne van Kesteren on 2013-05-09 (public-webappsec@w3.org from May 2013)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Wed, 8 May 2013 22:15:00 -0700
To: Mountie Lee <mountie@paygate.net>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <CADnb78iq5BN5TZfXb+HOmHabA5Py+s8AdKkHpBPwdeZq9910FQ@mail.gmail.com>

On Wed, May 8, 2013 at 7:19 PM, Mountie Lee <mountie@paygate.net> wrote:
> my question for WebAppSec is
> does the Resource of CORS stands for remote Resource only?
> can the local resources (not just for cryptography key) be in scope of CORS?

CORS is a protocol on top of HTTP, so I don't think we can make it
work in the way you want here.


--
http://annevankesteren.nl/

Received on Thursday, 9 May 2013 05:15:36 UTC