search

converspace / webmention

A modern alternative to Pingback.
webmention.org
173 stars 18 forks source link

cross-origin resource sharing #28

Closed pfefferle closed 5 years ago

pfefferle commented 11 years ago

Should we require the cors header (Access-Control-Allow-Origin: *) to enable webmentions via javascript?

snarfed commented 11 years ago

i'm going to pretend this is a democracy and cast a yes vote for this. :P

sandeepshetty commented 11 years ago

Feel free to send in a pull request for this.

pfefferle commented 11 years ago

Should we "recommend" or "require" it???

sandeepshetty commented 10 years ago

Do you have a reason to "require" it?

pfefferle commented 10 years ago

As i said... To enable mentions via JavaScript...

sandeepshetty commented 10 years ago

I meant something along the lines of "Considering the increasing popularity of static sites/blogs these days, it might make sense to require cors. Although this will allow the ability to send webmentions via JS, they'll still require a third party service to accept webmentions. Which means if you decide to accept webmentions via JS you cannot respond back to them."

Then we can talk about the pro/cons about allowing people to talk without giving us the ability to talk back to them.

pfefferle commented 10 years ago

@sandeepshetty that sounds perfect!

sandeepshetty commented 10 years ago

Based on my comment above about the asymmetry, I'm leaning towards a SHOULD or MAY, unless someone has a strong reason for a MUST.