I changed my mind on several things below.
On Fri, 16 May 2008 13:37:54 +0200, Anne van Kesteren <[EMAIL PROTECTED]>
wrote:
On Fri, 16 May 2008 02:07:57 +0200, Ian Hickson <[EMAIL PROTECTED]> wrote:
Anne, can you summarise what needs doing to XHR2 and AC to move them
forwards to last call? Is there a list of outstanding comments anywhere?
XMLHttpRequest Level 2
* Depends on XMLHttpRequest Level 1 feedback:
http://dev.w3.org/2006/webapi/XMLHttpRequest/disposition-of-comments-2
* It needs an introduction at some point. (Though not per se for Last
Call I suppose.)
This is both still true though I made some progress incorperating
feedback. (Need to make sure everything relevant made XMLHttpRequest 2 too
though.
Access Control for Cross-Site Requests
* Need to deal with Access-Control-Policy-Path normalization
Done.
* Need to figure out if we want the server to whitelist headers/methods
(we had methods before and then dropped it)
I changed my mind on this. Given the reply from Björn in particular I
don't think there's anything that needs to be done here.
* Need to figure out if we want the server to opt in to
cookies/credentials
I rejected this proposal in another e-mail.
It seems therefore that Access Control is ready for Last Call and it seems
slightly safer to wait with XMLHttpRequest 2 until we have had all the
feedback on XMLHttpRequest 1 for which the comment deadline is Monday June
2.
--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>