[whatwg] Enhancement request: change EventSource to allow cross-domain access

[Per-Erik Brodin]

On 2011-06-20 21:59, Ian Hickson wrote:
>> According to the CORS specification, a request is not to be terminated
>> even when the resource sharing check fails. However, when using CORS
>> with EventSource I think it may be justified since the response is
>> typically not returned right away.
>
> Not sure what you mean here. Could you elaborate?

I misread the sentence "Do not actually terminate the request." in the 
CORS spec as applying to both the resource sharing check pass and 
failure cases.

>
>> The Cache-Control request header used with EventSource is not in the
>> list of simple request headers and a preflight request is not really an
>> option here in my opinion.
>
> Not sure what you mean by "simple request headers". The Cache-Control
> header isn't a custom header, so it doesn't affect whether you use a
> preflight or not. I've clarified the spec.
>

OK, is Last-Event-ID also not a custom header then?

//Per-Erik