Re: SOR: CORS or From-Origin?

Tab Atkins wrote:

> Applying SOR to all @font-face resources means that you can
> refuse to request a resource altogether based on the url.  You
> don't ever have to make the request at all.

This is only true if the CORS mechanism is not used, if CORS is
used a user agent still needs to do a cross-origin request to
check for the presence of a CORS header that explicitly allows
cross-origin use.  This is behavior Firefox and IE implement for
all font resources.  So in terms of request volume, a same-origin
restriction with CORS for relaxation and Anne's From-Origin
mechanism are pretty much equivalent.  In either case a request
is necessary.

John Daggett

Received on Friday, 11 February 2011 01:16:25 UTC