- From: Robert O'Callahan <robert@ocallahan.org>
- Date: Mon, 26 Apr 2010 22:28:38 +1200
- To: public-webfonts-wg@w3.org
- Cc: Anne van Kesteren <annevk@opera.com>
Received on Monday, 26 April 2010 10:29:10 UTC
Anne van Kesteren wrote: > CORS is meant to lift restrictions that unless otherwise in place would be > privacy problems. I think the underlying issue here is whether font loads should apply a same-origin restriction by default. As far as I know, there's nothing in the CORS spec that ties it to a particular *motivation* for same-origin restriction, or to particular resource types. CORS should be applicable to any kind of same-origin restriction. Rob -- "He was pierced for our transgressions, he was crushed for our iniquities; the punishment that brought us peace was upon him, and by his wounds we are healed. We all, like sheep, have gone astray, each of us has turned to his own way; and the LORD has laid on him the iniquity of us all." [Isaiah 53:5-6]
Received on Monday, 26 April 2010 10:29:10 UTC