[whatwg] Enhancement request: change EventSource to allow cross-domain access
per-erik.brodin at ericsson.com
Mon Jun 20 07:13:42 PDT 2011
On 2011-06-20 12:53, Jonas Sicking wrote:
> Headers that the implementation adds doesn't need to be added to this
> list. For example the "Host" header is set by the browser in almost
> all situations, but it does not need to be added to the list of
> "simple headers". Indeed, adding in there would an out right bad idea.
> So I'm not convinced that the Last-Event-ID header needs to be in the list.
Only "custom request headers" are matched against the list of "simple
headers" and "Host" is not a custom header set by the EventSource
implementation, hence there is no need to add it to the list.
In XHR Level 2 the custom request headers are the "author request
headers". An option would be to always match the list of simple headers
against author request headers only.
More information about the whatwg