- From: Ian Hickson <ian@hixie.ch>
- Date: Wed, 25 Aug 2010 21:02:18 +0000 (UTC)
On Mon, 2 Aug 2010, Charles Pritchard wrote: > > > > [ UAs can use <input type=file> to let the user enter remote URLs ] > > When a user through selection, click+drag or manual entry of a URL > should the browser still submit an Origin request header? It seems that > CORS doesn't come into effect here -- but at the same time, it'd be > handy for logging purposes and added security. I don't think there'd be an origin, but that's rather up to the user agent. (In this case it's acting on behalf of the user, not the page, so I don't think it makes sense to give the page's origin.) -- Ian Hickson U+1047E )\._.,--....,'``. fL http://ln.hixie.ch/ U+263A /, _.. \ _\ ;`._ ,. Things that are impossible just take longer. `._.-(,_..'--(,_..'`-.;.'
Received on Wednesday, 25 August 2010 14:02:18 UTC