http://www.w3.org/html/wg/html5/ has some usage of "same-origin" while it seems that the intention is for it to be all "same origin". I'd prefer if it was all "same origin" (apart from tokens, of course) as that's what I/I'll use in XLMHttpRequest et al. -- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>