w3c / webappsec-suborigins

Suborigins
https://w3c.github.io/webappsec-suborigins/
Other
25 stars 9 forks source link

Don't use The Web Origin Concept #53

Closed annevk closed 7 years ago

annevk commented 7 years ago

That specification is mostly an informative guide at this point. If you actually want to change what an origin is, you need to patch HTML.

(I realize you told me not to review, but couldn't help but notice this while looking at the Fetch changes.)

devd commented 7 years ago

Not https://tools.ietf.org/html/rfc6454 ?

annevk commented 7 years ago

Right. See how HTML deals with origins.

joelweinberger commented 7 years ago

Will do! Thanks for the issue.

joelweinberger commented 7 years ago

All normative references are removed. Where origin updates are necessary, we've started using origin in HTML.