Cross Site XMLHttpRequest: Difference between revisions

Line 23: Line 23:
=== Issues ===
=== Issues ===


* We have to check that the code in onStartRequest in the original streamlistener doesn't do things that are too late to do once the delayed onStartRequest is called.  
* We have to check that the code in onStartRequest in the original streamlistener doesn't do things that are too late to do once the delayed onStartRequest is called.
 
* Is it possible to cancel with a network error if we get a 404 or 401 or similar? This would be a good way to avoid making it possible for the site to check for the existence of files on the server or check if the user is logged in or not.


== Security worries ==
== Security worries ==
Confirmed users
716

edits