On Thu, 17 Dec 2009 22:24:56 +0100, Mark S. Miller erig...@google.com
wrote:
Despite the costs of doing preflight opt-in on a per-resource basis
rather
than a per-origin basis, to meet its security goals, CORS proposes to do
preflight on a per-resource basis. I have seen the rationale for
Despite the costs of doing preflight opt-in on a per-resource basis rather
than a per-origin basis, to meet its security goals, CORS proposes to do
preflight on a per-resource basis. I have seen the rationale for this stated
in bits and pieces. Can anyone point me at a reasonably self contained
