W3C home > Mailing lists > Public > whatwg@whatwg.org > August 2010

[whatwg] Input URL State and Files object

From: Ian Hickson <ian@hixie.ch>
Date: Wed, 25 Aug 2010 21:02:18 +0000 (UTC)
Message-ID: <Pine.LNX.4.64.1008252059570.3392@ps20323.dreamhostps.com>
On Mon, 2 Aug 2010, Charles Pritchard wrote:
> >
> > [ UAs can use <input type=file> to let the user enter remote URLs ]
>
> When a user through selection, click+drag or manual entry of a URL 
> should the browser still submit an Origin request header? It seems that 
> CORS doesn't come into effect here -- but at the same time, it'd be 
> handy for logging purposes and added security.

I don't think there'd be an origin, but that's rather up to the user 
agent. (In this case it's acting on behalf of the user, not the page, so I 
don't think it makes sense to give the page's origin.)

-- 
Ian Hickson               U+1047E                )\._.,--....,'``.    fL
http://ln.hixie.ch/       U+263A                /,   _.. \   _\  ;`._ ,.
Things that are impossible just take longer.   `._.-(,_..'--(,_..'`-.;.'
Received on Wednesday, 25 August 2010 14:02:18 UTC

This archive was generated by hypermail 2.4.0 : Wednesday, 22 January 2020 16:59:26 UTC