On 2011-06-20 21:59, Ian Hickson wrote:
According to the CORS specification, a request is not to be terminated
even when the resource sharing check fails. However, when using CORS
with EventSource I think it may be justified since the response is
typically not returned right away.
Not sure what you mean here. Could you elaborate?
I misread the sentence "Do not actually terminate the request." in the
CORS spec as applying to both the resource sharing check pass and
failure cases.
The Cache-Control request header used with EventSource is not in the
list of simple request headers and a preflight request is not really an
option here in my opinion.
Not sure what you mean by "simple request headers". The Cache-Control
header isn't a custom header, so it doesn't affect whether you use a
preflight or not. I've clarified the spec.
OK, is Last-Event-ID also not a custom header then?
//Per-Erik
