Cross Site XMLHttpRequest: Difference between revisions

Cross Site XMLHttpRequest (view source)

60 bytes removed , 20 February 2007

m

Link to latest version of spec

65

edits

@@ Line 5: / Line 5: @@
 == Details ==
-There are currently two draft specs from w3c for how this should work. The signaling for when a document is accessible is spec'ed in the access-control draft spec [http://lists.w3.org/Archives/Public/public-appformats/2006Oct/att-0001/AC-2006-10-02-Porter.html]. This states that the site can insert <?access-control?> processing instructions into XML files that says which sites can access the file. It also allows for http-headers to be added to allow access to be controlled to any file type.
+There are currently two draft specs from w3c for how this should work. The signaling for when a document is accessible is spec'ed in the access-control draft spec [http://www.w3.org/TR/access-control/]. This states that the site can insert <?access-control?> processing instructions into XML files that says which sites can access the file. It also allows for http-headers to be added to allow access to be controlled to any file type.
 The PI contains lists of URL patterns that describe which URLs can access the file. These patterns can contain wildcards, but follow strict parsing rules rather than being general URLs.