- From: Per-Erik Brodin <per-erik.brodin@ericsson.com>
- Date: Tue, 21 Jun 2011 16:17:30 +0200
On 2011-06-20 21:59, Ian Hickson wrote: >> According to the CORS specification, a request is not to be terminated >> even when the resource sharing check fails. However, when using CORS >> with EventSource I think it may be justified since the response is >> typically not returned right away. > > Not sure what you mean here. Could you elaborate? I misread the sentence "Do not actually terminate the request." in the CORS spec as applying to both the resource sharing check pass and failure cases. > >> The Cache-Control request header used with EventSource is not in the >> list of simple request headers and a preflight request is not really an >> option here in my opinion. > > Not sure what you mean by "simple request headers". The Cache-Control > header isn't a custom header, so it doesn't affect whether you use a > preflight or not. I've clarified the spec. > OK, is Last-Event-ID also not a custom header then? //Per-Erik
Received on Tuesday, 21 June 2011 07:17:30 UTC