Re: XHR: definition of same-origin

[Boris Zbarsky]

Maciej Stachowiak wrote:

I'm not sure offhand if baseURI is the right way to determine the security domain.

It definitely isn't, for the reasons you list.

-Boris