Re: [APPS-REVIEW] HTTP cross-domain scripting access control W3C document

[Mark Nottingham <mnot at yahoo-inc.com>]

Have they asked for an APPS area review?

Cheers,


On 19/11/2008, at 12:36 PM, Lisa Dusseault wrote:

> FYI:
>
> http://www.w3.org/TR/access-control/
>
> "This document defines a mechanism to enable client-side cross-site  
> requests. Specifications that want to enable cross-site requests in  
> an API they define can use the algorithms defined by this  
> specification. If such an API is used on http://example.org  
> resources, a resource on http://hello-world.example can opt in using  
> the mechanism described by this specification (e.g., specifying  
> Access-Control-Allow-Origin: http://example.org as response header),  
> which would allow that resource to be fetched cross-site from http://example.org 
> ."
>
>
> _______________________________________________
> APPS-REVIEW mailing list
> APPS-REVIEW at ietf.org
> https://www.ietf.org/mailman/listinfo/apps-review

--
Mark Nottingham       mnot at yahoo-inc.com


_______________________________________________
APPS-REVIEW mailing list
APPS-REVIEW at ietf.org
https://www.ietf.org/mailman/listinfo/apps-review