/lists.whatwg.org/pipermail/whatwg-whatwg.org/2008-September/016358.html

https://github.com/whatwg/whatwg.org · HTML · 72 lines · 60 code · 5 blank · 7 comment · 0 complexity · 6989925330d82dd76a38d21a7e734963 MD5 · raw file 

    

  1. <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
    2. 

  2. <HTML>
    3. 

  3.  <HEAD>
    4. 

  4.    <TITLE> [whatwg] WebSocket websocket-origin
    5. 

  5.    </TITLE>
    6. 

  6.    <LINK REL="Index" HREF="index.html" >
    7. 

  7.    <LINK REL="made" HREF="mailto:whatwg%40lists.whatwg.org?Subject=Re%3A%20%5Bwhatwg%5D%20WebSocket%20websocket-origin&In-Reply-To=%3Cop.uh8969an64w2qv%40annevk-t60.oslo.opera.com%3E">
    8. 

  8.    <META NAME="robots" CONTENT="index,nofollow">
    9. 

  9.    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
    10. 

  10.    <LINK REL="Previous"  HREF="016343.html">
    11. 

  11.    <LINK REL="Next"  HREF="016377.html">
    12. 

  12.  </HEAD>
    13. 

  13.  <BODY BGCOLOR="#ffffff">
    14. 

  14.    <H1>[whatwg] WebSocket websocket-origin</H1>
    15. 

  15. <!--htdig_noindex-->
    16. 

  16.     <B>Anne van Kesteren</B> 
    17. 

  17.     <A HREF="mailto:whatwg%40lists.whatwg.org?Subject=Re%3A%20%5Bwhatwg%5D%20WebSocket%20websocket-origin&In-Reply-To=%3Cop.uh8969an64w2qv%40annevk-t60.oslo.opera.com%3E"
    18. 

  18.        TITLE="[whatwg] WebSocket websocket-origin">annevk at opera.com
    19. 

  19.        </A><BR>
    20. 

  20.     <I>Mon Sep 29 11:41:23 PDT 2008</I>
    21. 

  21.     <P><UL>
    22. 

  22.         <LI>Previous message: <A HREF="016343.html">[whatwg] Dealing with UI redress vulnerabilities inherent to the current web
    23. 

  23. </A></li>
    24. 

  24.         <LI>Next message: <A HREF="016377.html">[whatwg] WebSocket websocket-origin
    25. 

  25. </A></li>
    26. 

  26.          <LI> <B>Messages sorted by:</B> 
    27. 

  27.               <a href="date.html#16358">[ date ]</a>
    28. 

  28.               <a href="thread.html#16358">[ thread ]</a>
    29. 

  29.               <a href="subject.html#16358">[ subject ]</a>
    30. 

  30.               <a href="author.html#16358">[ author ]</a>
    31. 

  31.          </LI>
    32. 

  32.        </UL>
    33. 

  33.     <HR>  
    34. 

  34. <!--/htdig_noindex-->
    35. 

  35. <!--beginarticle-->
    36. 

  36. <PRE>What is the reason for doing literal comparison on the websocket-origin  
    37. 

  37. and websocket-location HTTP headers? Access Control for Cross-Site  
    38. 

  38. Requests is currently following this design for  
    39. 

  39. access-control-allow-origin but sicking is complaining about so maybe it  
    40. 

  40. should be URL-without-&lt;path&gt; comparison instead. (E.g., then  
    41. 

  41. <A HREF="http://example.org">http://example.org</A> and <A HREF="http://example.org:80">http://example.org:80</A> would be equivalent.)
    42. 

  42. 

  43. 

  44. -- 
    45. 

  45. Anne van Kesteren
    46. 

  46. &lt;<A HREF="http://annevankesteren.nl/">http://annevankesteren.nl/</A>&gt;
    47. 

  47. &lt;<A HREF="http://www.opera.com/">http://www.opera.com/</A>&gt;
    48. 

  48. 

  49. </PRE>
    50. 

  50. 

  51. <!--endarticle-->
    52. 

  52. <!--htdig_noindex-->
    53. 

  53.     <HR>
    54. 

  54.     <P><UL>
    55. 

  55.         <!--threads-->
    56. 

  56. 	<LI>Previous message: <A HREF="016343.html">[whatwg] Dealing with UI redress vulnerabilities inherent to the current web
    57. 

  57. </A></li>
    58. 

  58. 	<LI>Next message: <A HREF="016377.html">[whatwg] WebSocket websocket-origin
    59. 

  59. </A></li>
    60. 

  60.          <LI> <B>Messages sorted by:</B> 
    61. 

  61.               <a href="date.html#16358">[ date ]</a>
    62. 

  62.               <a href="thread.html#16358">[ thread ]</a>
    63. 

  63.               <a href="subject.html#16358">[ subject ]</a>
    64. 

  64.               <a href="author.html#16358">[ author ]</a>
    65. 

  65.          </LI>
    66. 

  66.        </UL>
    67. 

  67. 

  68. <hr>
    69. 

  69. <a href="http://lists.whatwg.org/listinfo.cgi/whatwg-whatwg.org">More information about the whatwg
    70. 

  70. mailing list</a><br>
    71. 

  71. <!--/htdig_noindex-->
    72. 

  72. </body></html>
    73.