Anne van Kesteren wrote:

On Thu, 10 Jul 2008 00:32:18 +0200, Maciej Stachowiak <[EMAIL PROTECTED]> wrote:
I would be in favor of Access-Control or Access-Control-Allow, I think Access-Control-Origin and Origin are confusing in combination. It seems unclear from the names which is a request header and which is a response header.

We could restrict Access-Control-* to the server.

What would that win us?

Naming all headers related to the spec Access-Control-* (as the spec does now) seems to add clarity IMHO.

/ Jonas

Reply via email to