On Fri, 08 Feb 2008 20:25:13 +0100, Jonas Sicking <[EMAIL PROTECTED]> wrote:
At this point it would make sense to rename the Method-Check-* headers
too. I recommend changing the "Method-Check-" part to
"Access-Control-", so that the headers are:
On requests from a client:
Access-Control-Origin
On responses to OPTIONS when the policy is elsewhere:
Access-Control-Policy-Path
On all other responses:
Access-Control
Access-Control-Max-Age
Access-Control-Policy-Path
This seems somewhat simplified. The last two would only exist for
OPTIONS replies, right? And they are both optional so neither might
exist even there.
Yeah. It's more like this:
On requests from a client:
Access-Control-Origin
On responses to OPTIONS when the policy is elsewhere:
Access-Control-Policy-Path
On responses to OPTIONS defining a policy path:
Access-Control
Access-Control-Max-Age (optional)
Access-Control-Policy-Path
On responses to OPTIONS:
Access-Control
Access-Control-Max-Age (optional)
On other responses:
Access-Control
--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>
