On 2011-09-23 09:29, Julian Reschke wrote:
...
1. NOTE: Running this algorithm multiple times for the same URI
can produce different values each time. Typically, user
agents compute the origin of, for example, an HTML document
once and use that origin for subsequent security checks
rather than recomputing the origin for each security check.
It seems the NOTE shouldn't be in a numbered list (same for item 4).
...
Draft -06 has another instance of this nit :-)
b) "null" in ABNF means case-insensitive; consider replacing with octet
sequence and putting the literal "null" into a comment.
...
You now have:
origin-list-or-null = %x6E %x75 %x6C %x6C / origin-list
You can make that
origin-list-or-null = %x6E.75.6C.6C / origin-list
and make it more readable by saying:
null = %x6E.75.6C.6C ; "null", case-sensitive
origin-list-or-null = null / origin-list
Best regards, Julian
_______________________________________________
websec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/websec
