Anne,

Perhaps you did not see my response to Jonas' message:


So then you just need to add something to the spec that makes it perfectly 
clear that XMLHttpRequest scripts the HTTP subsystem of the UA, and does not 
create its own network connections and implement rudimentary HTTP itself...

Perhaps you could add a note of this sort to the spec for 
getAllRequestHeaders() something saying that the UA sees these and processes 
them as it would for an HTTP request initiated by the end user.

My original point was simply that there is a non-parallelism in the spec as it stands now. Outgoing cookies are explicitly addressed, but incoming cookies are not. If you make it clear that XMLHttpRequest uses the HTTP facilities of the UA, then that would satisfy me.


Anne van Kesteren wrote:
On Mon, 24 Apr 2006 07:15:01 +0200, Jonas Sicking <[EMAIL PROTECTED]> wrote:

What I meant, however, was that you need to specify that the browser must/should/should not store cookies sent with the response to an XMLHttpRequest.


I'm not sure that we actually need to specify this. A UA supporting cookies should use them in any and all http transfers. If we go and specify how every possible web feature interact with XHR we're never going to get done.


I tend to agree. David, what do you think?




Reply via email to