This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 25854 - Throwing an error in XHR.setRequestHeader for forbidden headers
Summary: Throwing an error in XHR.setRequestHeader for forbidden headers
Status: RESOLVED WONTFIX
Alias: None
Product: WebAppsWG
Classification: Unclassified
Component: XHR (show other bugs)
Version: unspecified
Hardware: PC Linux
: P2 normal
Target Milestone: ---
Assignee: Anne
QA Contact: public-webapps-bugzilla
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-05-21 16:06 UTC by Manish Goregaokar
Modified: 2014-05-21 16:11 UTC (History)
2 users (show)

See Also:


Attachments

Description Manish Goregaokar 2014-05-21 16:06:53 UTC
http://xhr.spec.whatwg.org/#the-setrequestheader()-method

[[
Terminate these steps if name is a forbidden author header name.


]]

Perhaps we should throw a SecurityError or similar here?
Comment 1 Anne 2014-05-21 16:11:44 UTC
This is a very old API, we can't.