009779.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML>
 <HEAD>
   <TITLE> [html5] r2897 - [e] (0) note for later about websocket security	issue
   </TITLE>
   <LINK REL="Index" HREF="index.html" >
   <LINK REL="made" HREF="mailto:commit-watchers%40lists.whatwg.org?Subject=Re%3A%20%5Bhtml5%5D%20r2897%20-%20%5Be%5D%20%280%29%20note%20for%20later%20about%20websocket%20security%0A%09issue&In-Reply-To=%3C20090324022829.D9C991389FC%40hixie.dreamhostps.com%3E">
   <META NAME="robots" CONTENT="index,nofollow">
   <style type="text/css">
       pre {
           white-space: pre-wrap;       /* css-2.1, curent FF, Opera, Safari */
           }
   </style>
   <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
   <LINK REL="Previous"  HREF="009778.html">
   <LINK REL="Next"  HREF="009780.html">
 </HEAD>
 <BODY BGCOLOR="#ffffff">
   <H1>[html5] r2897 - [e] (0) note for later about websocket security	issue</H1>

    <B>whatwg at whatwg.org</B> 
    <A HREF="mailto:commit-watchers%40lists.whatwg.org?Subject=Re%3A%20%5Bhtml5%5D%20r2897%20-%20%5Be%5D%20%280%29%20note%20for%20later%20about%20websocket%20security%0A%09issue&In-Reply-To=%3C20090324022829.D9C991389FC%40hixie.dreamhostps.com%3E"
       TITLE="[html5] r2897 - [e] (0) note for later about websocket security	issue">whatwg at whatwg.org
       </A><BR>
    <I>Mon Mar 23 19:28:29 PDT 2009</I>
    <P><UL>
        <LI>Previous message: <A HREF="009778.html">[html5] r2896 - [e] (0) Remove the commented-out notification API.
</A></li>
        <LI>Next message: <A HREF="009780.html">[html5] r2898 - [] (0) Define the storage mutex. Will be used in	the next few checkins.
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#9779">[ date ]</a>
              <a href="thread.html#9779">[ thread ]</a>
              <a href="subject.html#9779">[ subject ]</a>
              <a href="author.html#9779">[ author ]</a>
         </LI>
       </UL>
    <HR>  


<PRE>Author: ianh
Date: 2009-03-23 19:28:29 -0700 (Mon, 23 Mar 2009)
New Revision: 2897

Modified:
   source
Log:
[e] (0) note for later about websocket security issue

Modified: source
===================================================================

--- source	2009-03-24 02:12:12 UTC (rev 2896)
+++ source	2009-03-24 02:28:29 UTC (rev 2897)
@@ -61228,7 +61228,10 @@
 
   &lt;p class=&quot;XXX&quot;&gt;...&lt;/p&gt;
 
+  &lt;!-- should mention that servers should only echo the origin if they
+  want to talk to that origin --&gt;
 
+
   &lt;h5&gt;IANA considerations&lt;/h5&gt;
 
   &lt;p class=&quot;XXX&quot;&gt;...(two URI schemes, two ports, HTTP Upgrade keyword)&lt;/p&gt;


</PRE>


<!--endarticle-->
<!--htdig_noindex-->
    <HR>
    <P><UL>
        <!--threads-->
	<LI>Previous message: <A HREF="009778.html">[html5] r2896 - [e] (0) Remove the commented-out notification API.
</A></li>
	<LI>Next message: <A HREF="009780.html">[html5] r2898 - [] (0) Define the storage mutex. Will be used in	the next few checkins.
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#9779">[ date ]</a>
              <a href="thread.html#9779">[ thread ]</a>
              <a href="subject.html#9779">[ subject ]</a>
              <a href="author.html#9779">[ author ]</a>
         </LI>
       </UL>

<hr>
<a href="http://lists.whatwg.org/listinfo.cgi/commit-watchers-whatwg.org">More information about the Commit-Watchers
mailing list</a><br>
<!--/htdig_noindex-->
</body></html>


/lists.whatwg.org/pipermail/commit-watchers-whatwg.org/2009/009779.html