Anne van Kesteren wrote:
On Thu, 10 Jul 2008 00:32:18 +0200, Maciej Stachowiak <[EMAIL PROTECTED]>
wrote:
I would be in favor of Access-Control or Access-Control-Allow, I think
Access-Control-Origin and Origin are confusing in combination. It
seems unclear from the names which is a request header and which is a
response header.
We could restrict Access-Control-* to the server.
What would that win us?
Naming all headers related to the spec Access-Control-* (as the spec
does now) seems to add clarity IMHO.
/ Jonas