ISSUE-90
Exposing more (~infinite) response headers
- State:
- RAISED
- Product:
- CORS
- Raised by:
- Anne van Kesteren
- Opened on:
- 2009-06-16
- Description:
In http://lists.w3.org/Archives/Public/public-webapps/2009AprJun/0967.html Mark Nottingham comments on the asymmetry of exposing the body of the response but only a tiny subset of the headers. He argues for * Expanding this whitelist and * Giving responses of resources a way to indicate which headers are ok to expose or * Turning it into a blacklist He indicated he was not satisfied deferring this issue to CORS2 and considers it a showstopper for CORS1.
- Related Actions Items:
- No related actions
- Related emails:
- Re: [cors] update (oct5) (from art.barstow@nokia.com on 2009-10-05)
- Re: [cors] Comments on 17 March 2009 (from annevk@opera.com on 2009-09-23)
- Re: [cors] Review (from annevk@opera.com on 2009-06-16)
- ISSUE-90: Exposing more (~infinite) response headers [CORS] (from sysbot+tracker@w3.org on 2009-06-16)
Related notes:
No additional notes.
Display change log