Skip to content
Permalink
Browse files

new reality

  • Loading branch information...
annevk committed Sep 12, 2012
1 parent 1e6146b commit d94f992865142088724866ad5b4e7bea0216897e
Showing with 54 additions and 2,488 deletions.
  1. +1 −0 .gitignore
  2. +0 −6 Makefile
  3. +38 −54 Overview.html
  4. +14 −100 Overview.src.html
  5. +1 −1 README.markdown
  6. +0 −2,327 publish.html
@@ -0,0 +1 @@
data/
@@ -9,9 +9,3 @@ Overview.html: Overview.src.html data Makefile

data/xrefs/network/cors.json: Overview.src.html Makefile
$(ANOLIS) --dump-xrefs=$@ $< /tmp/spec

publish: Overview.src.html data Makefile
$(ANOLIS) --output-encoding=ascii --omit-optional-tags --quote-attr-values \
--w3c-compat --enable=xspecxref --enable=refs --w3c-shortname="cors" \
--filter=".dontpublish" --pubdate="$(PUBDATE)" --w3c-status=WD \
$< publish.html
@@ -1,80 +1,64 @@
<!DOCTYPE html><html lang="en-US"><head>
<meta charset="utf-8">
<title>Cross-Origin Resource Sharing</title>
<style>
.example { margin-left:1em; padding-left:1em; border-left:double; color:#222; background:#fcfcfc }
.example code strong { color:inherit; background:#ff0 }
.note { margin-left:2em; font-weight:bold; font-style:italic; color:green }
.note pre { font-weight:normal; font-style:normal }
.warning { margin-left:2em; font-weight:bold; font-style:italic; color:red }
p.warning::before { content:"Warning: " }
pre > code, li > code { color:inherit; background:transparent }
p.note::before { content:"Note: " }
.XXX { padding:.5em; border:solid #f00 }
p.XXX::before { content:"Issue: " }
dl.switch { padding-left:2em }
dl.switch > dt { text-indent:-1.5em }
dl.switch > dt:before { content:'\21AA'; padding:0 0.5em 0 0; display:inline-block; width:1em; text-align:right; line-height:0.5em }
em.ct { text-transform:lowercase; font-variant:small-caps; font-style:normal }
dfn { font-weight:bold; font-style:normal }
code { color:orangered; }
code :link, code :visited { color:inherit }
hr:not(.top) { display:block; background:none; border:none; padding:0; margin:2em 0; height:auto }
</style>
<link href="http://www.w3.org/StyleSheets/TR/W3C-ED" rel="stylesheet">
<title>Cross-Origin Resource Sharing Standard</title>
<link href="//www.whatwg.org/style/specification" rel="stylesheet">
<link href="//www.whatwg.org/images/icon" rel="icon">
</head>
<body>
<div class="head">

<!--begin-logo-->
<p><a href="http://www.w3.org/"><img alt="W3C" height="48" src="http://www.w3.org/Icons/w3c_home" width="72"></a></p>
<!--end-logo-->

<h1 id="cors">Cross-Origin Resource Sharing</h1>

<h2 class="no-num no-toc" id="w3c-doctype">Editor's Draft 11 June 2012</h2>
<h2 class="no-num no-toc" id="living-standard-&mdash;-last-updated-12-september-2012">Living Standard &mdash; Last Updated 12 September 2012</h2>

<dl>
<dt>This Version:</dt>
<dd class="dontpublish"><a href="http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html">http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html</a></dd>
<dt class="dontpublish">Participate:</dt>
<dd class="dontpublish">Send feedback to <a href="mailto:public-webappsec@w3.org?subject=[cors]%20">public-webappsec@w3.org</a>
<dd><a href="//fetch.spec.whatwg.org/">http://fetch.spec.whatwg.org/</a></dd>
<dt>Participate:</dt>
<dd>Send feedback to <a href="mailto:public-webappsec@w3.org?subject=[cors]%20">public-webappsec@w3.org</a>
(<a href="http://lists.w3.org/Archives/Public/public-webappsec/">archives</a>) or
<a href="https://www.w3.org/Bugs/Public/enter_bug.cgi?product=WebAppsSec&amp;component=CORS">file a bug</a>
(<a href="https://www.w3.org/Bugs/Public/buglist.cgi?product=WebAppsSec&amp;component=CORS&amp;resolution=---">open bugs</a>)
<dd class="dontpublish"><a href="http://wiki.whatwg.org/wiki/IRC">IRC: #whatwg on Freenode</a>
<dd class="dontpublish"><a href="//wiki.whatwg.org/wiki/IRC">IRC: #whatwg on Freenode</a>

<dt>Version History:
<dd><a href="http://dvcs.w3.org/hg/cors/shortlog">http://dvcs.w3.org/hg/cors/shortlog</a>

<dt>Previous Versions:</dt>
<dd><a href="http://www.w3.org/TR/2012/WD-cors-20120403/">http://www.w3.org/TR/2012/WD-cors-20120403/</a>
<dd><a href="http://www.w3.org/TR/2010/WD-cors-20100727/">http://www.w3.org/TR/2010/WD-cors-20100727/</a></dd>
<dd><a href="http://www.w3.org/TR/2009/WD-cors-20090317/">http://www.w3.org/TR/2009/WD-cors-20090317/</a></dd>
<dd><a href="http://www.w3.org/TR/2008/WD-access-control-20080912/">http://www.w3.org/TR/2008/WD-access-control-20080912/</a></dd>
<dd><a href="http://www.w3.org/TR/2008/WD-access-control-20080214/">http://www.w3.org/TR/2008/WD-access-control-20080214/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20071126/">http://www.w3.org/TR/2007/WD-access-control-20071126/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20071001/">http://www.w3.org/TR/2007/WD-access-control-20071001/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20070618/">http://www.w3.org/TR/2007/WD-access-control-20070618/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20070215/">http://www.w3.org/TR/2007/WD-access-control-20070215/</a></dd>
<dd><a href="http://www.w3.org/TR/2006/WD-access-control-20060517/">http://www.w3.org/TR/2006/WD-access-control-20060517/</a></dd>
<dd><a href="http://www.w3.org/TR/2005/NOTE-access-control-20050613/">http://www.w3.org/TR/2005/NOTE-access-control-20050613/</a></dd>
<dd><a href="https://github.com/whatwg/fetch/commits">https://github.com/whatwg/fetch/commits</a>

<dt>Editor:</dt>
<dd><a href="http://annevankesteren.nl/">Anne van Kesteren</a>
(<a href="http://www.opera.com/">Opera Software ASA</a>)
&lt;<a href="mailto:annevk@annevk.nl">annevk@annevk.nl</a>&gt;</dd>
</dl>

<div class="w3conly">
<!--begin-copyright-->
<p class="copyright"><a href="http://www.w3.org/Consortium/Legal/ipr-notice#Copyright">Copyright</a> &copy; 2012 <a href="http://www.w3.org/"><abbr title="World Wide Web Consortium">W3C</abbr></a><sup>&reg;</sup> (<a href="http://www.csail.mit.edu/"><abbr title="Massachusetts Institute of Technology">MIT</abbr></a>, <a href="http://www.ercim.eu/"><abbr title="European Research Consortium for Informatics and Mathematics">ERCIM</abbr></a>, <a href="http://www.keio.ac.jp/">Keio</a>), All Rights Reserved. W3C <a href="http://www.w3.org/Consortium/Legal/ipr-notice#Legal_Disclaimer">liability</a>, <a href="http://www.w3.org/Consortium/Legal/ipr-notice#W3C_Trademarks">trademark</a> and <a href="http://www.w3.org/Consortium/Legal/copyright-documents">document use</a> rules apply.</p>
<!--end-copyright--></div>
<script async="" src="//dvcs.w3.org/hg/quirks-mode/raw-file/tip/file-bug.js"></script>

<p class="copyright"><a href="http://creativecommons.org/publicdomain/zero/1.0/" rel="license"><img alt="CC0" src="http://i.creativecommons.org/p/zero/1.0/80x15.png"></a>
To the extent possible under law, the editor has waived all copyright and
related or neighboring rights to this work. In addition, as of
12 September 2012, the editor has made this specification available
under the
<a href="http://www.openwebfoundation.org/legal/the-owf-1-0-agreements/owfa-1-0" rel="license">Open Web Foundation Agreement Version 1.0</a>,
which is available at
http://www.openwebfoundation.org/legal/the-owf-1-0-agreements/owfa-1-0.

</div>



<h2 class="no-num no-toc" id="abstract">Abstract</h2>

<p>This document defines a mechanism to enable client-side cross-origin
requests. Specifications that enable an API to make cross-origin requests
to resources can use the algorithms defined by this specification. If
such an API is used on <code>http://example.org</code> resources, a
resource on <code>http://hello-world.example</code> can opt in using the
mechanism described by this specification (e.g., specifying
<code>Access-Control-Allow-Origin: http://example.org</code> as response
header), which would allow that resource to be fetched cross-origin from
<code>http://example.org</code>.</p>

</div>


<h2 class="no-num no-toc" id="toc">Table of Contents</h2>
<h2 class="no-num no-toc" id="toc">Table of Contents</h2>


<!--begin-toc-->
@@ -1833,7 +1817,7 @@ <h2 class="no-num" id="references">References</h2>
<dd>(Non-normative) <cite><a href="http://dev.w3.org/html5/eventsource/">Server-Sent Events</a></cite>, Ian Hickson. W3C.

<dt id="refsHTML">[HTML]
<dd><cite><a href="http://www.whatwg.org/C">HTML</a></cite>, Ian Hickson. WHATWG.
<dd><cite><a href="http://www.whatwg.org/specs/web-apps/current-work/multipage/">HTML</a></cite>, Ian Hickson. WHATWG.

<dt id="refsHTTP">[HTTP]
<dd><cite><a href="http://tools.ietf.org/html/rfc2616">Hypertext Transfer Protocol -- HTTP/1.1</a></cite>, Roy Fielding, James Gettys, Jeffrey Mogul et al.. IETF.
@@ -1889,7 +1873,7 @@ <h2 class="no-num" id="acknowledgments">Acknowledgments</h2>
Jesse M. Heines,
Jonas Sicking,
Lachlan Hunt,
&#21570;&#24247;&#35946; (Kang-Hao Lu),
&#x5442;&#x5eb7;&#x8c6a; (Kang-Hao Lu),
Maciej Stachowiak,
Marc Silbey,
Marcos Caceres,
@@ -2,78 +2,40 @@
<html lang="en-US">
<head>
<meta charset=utf-8>
<title>Cross-Origin Resource Sharing</title>
<style>
.example { margin-left:1em; padding-left:1em; border-left:double; color:#222; background:#fcfcfc }
.example code strong { color:inherit; background:#ff0 }
.note { margin-left:2em; font-weight:bold; font-style:italic; color:green }
.note pre { font-weight:normal; font-style:normal }
.warning { margin-left:2em; font-weight:bold; font-style:italic; color:red }
p.warning::before { content:"Warning: " }
pre > code, li > code { color:inherit; background:transparent }
p.note::before { content:"Note: " }
.XXX { padding:.5em; border:solid #f00 }
p.XXX::before { content:"Issue: " }
dl.switch { padding-left:2em }
dl.switch > dt { text-indent:-1.5em }
dl.switch > dt:before { content:'\21AA'; padding:0 0.5em 0 0; display:inline-block; width:1em; text-align:right; line-height:0.5em }
em.ct { text-transform:lowercase; font-variant:small-caps; font-style:normal }
dfn { font-weight:bold; font-style:normal }
code { color:orangered; }
code :link, code :visited { color:inherit }
hr:not(.top) { display:block; background:none; border:none; padding:0; margin:2em 0; height:auto }
</style>
<link rel="stylesheet" href="http://www.w3.org/StyleSheets/TR/W3C-[STATUS]">
<title>Cross-Origin Resource Sharing Standard</title>
<link rel=stylesheet href=//www.whatwg.org/style/specification>
<link rel=icon href=//www.whatwg.org/images/icon>
</head>
<body>
<div class="head">
<!--logo-->

<h1 id="cors">Cross-Origin Resource Sharing</h1>

<h2 class="no-num no-toc" id="w3c-doctype">[LONGSTATUS] [DATE: 3 August 2002]</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated [DATE: 3 August 2002]</h2>

<dl>
<dt>This Version:</dt>
<dd class=dontpublish><a href="http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html">http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html</a></dd>
<dd><a href=//fetch.spec.whatwg.org/>http://fetch.spec.whatwg.org/</a></dd>
<dd class=publish><a href="[VERSION]">[VERSION]</a></dd>

<dt class=dontpublish>Participate:</dt>
<dd class=dontpublish>Send feedback to <a href="mailto:public-webappsec@w3.org?subject=[cors]%20">public-webappsec@w3.org</a>
<dt>Participate:</dt>
<dd>Send feedback to <a href="mailto:public-webappsec@w3.org?subject=[cors]%20">public-webappsec@w3.org</a>
(<a href="http://lists.w3.org/Archives/Public/public-webappsec/">archives</a>) or
<a href="https://www.w3.org/Bugs/Public/enter_bug.cgi?product=WebAppsSec&amp;component=CORS">file a bug</a>
(<a href="https://www.w3.org/Bugs/Public/buglist.cgi?product=WebAppsSec&amp;component=CORS&amp;resolution=---">open bugs</a>)
<dd class=dontpublish><a href="http://wiki.whatwg.org/wiki/IRC">IRC: #whatwg on Freenode</a>
<dd class=dontpublish><a href=//wiki.whatwg.org/wiki/IRC>IRC: #whatwg on Freenode</a>

<dt>Version History:
<dd><a href="http://dvcs.w3.org/hg/cors/shortlog">http://dvcs.w3.org/hg/cors/shortlog</a>

<dt class=publish>Latest Version:</dt>
<dd class=publish><a href="[LATEST]">[LATEST]</a></dd>

<dt class=publish>Latest Editor Draft:</dt>
<dd class=publish><a href="http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html">http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html</a></dd>

<dt>Previous Versions:</dt>
<dd><a href="http://www.w3.org/TR/2012/WD-cors-20120403/">http://www.w3.org/TR/2012/WD-cors-20120403/</a>
<dd><a href="http://www.w3.org/TR/2010/WD-cors-20100727/">http://www.w3.org/TR/2010/WD-cors-20100727/</a></dd>
<dd><a href="http://www.w3.org/TR/2009/WD-cors-20090317/">http://www.w3.org/TR/2009/WD-cors-20090317/</a></dd>
<dd><a href="http://www.w3.org/TR/2008/WD-access-control-20080912/">http://www.w3.org/TR/2008/WD-access-control-20080912/</a></dd>
<dd><a href="http://www.w3.org/TR/2008/WD-access-control-20080214/">http://www.w3.org/TR/2008/WD-access-control-20080214/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20071126/">http://www.w3.org/TR/2007/WD-access-control-20071126/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20071001/">http://www.w3.org/TR/2007/WD-access-control-20071001/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20070618/">http://www.w3.org/TR/2007/WD-access-control-20070618/</a></dd>
<dd><a href="http://www.w3.org/TR/2007/WD-access-control-20070215/">http://www.w3.org/TR/2007/WD-access-control-20070215/</a></dd>
<dd><a href="http://www.w3.org/TR/2006/WD-access-control-20060517/">http://www.w3.org/TR/2006/WD-access-control-20060517/</a></dd>
<dd><a href="http://www.w3.org/TR/2005/NOTE-access-control-20050613/">http://www.w3.org/TR/2005/NOTE-access-control-20050613/</a></dd>
<dd><a href=https://github.com/whatwg/fetch/commits>https://github.com/whatwg/fetch/commits</a>

<dt>Editor:</dt>
<dd><a href="http://annevankesteren.nl/">Anne van Kesteren</a>
(<a href="http://www.opera.com/">Opera Software ASA</a>)
&lt;<a href="mailto:annevk@annevk.nl">annevk@annevk.nl</a>></dd>
</dl>

<p class="now3c copyright"><a rel=license href="http://creativecommons.org/publicdomain/zero/1.0/"><img src="http://i.creativecommons.org/p/zero/1.0/80x15.png" alt=CC0></a>
<script src=//dvcs.w3.org/hg/quirks-mode/raw-file/tip/file-bug.js async></script>

<p class=copyright><a rel=license href="http://creativecommons.org/publicdomain/zero/1.0/"><img src="http://i.creativecommons.org/p/zero/1.0/80x15.png" alt=CC0></a>
To the extent possible under law, the editor has waived all copyright and
related or neighboring rights to this work. In addition, as of
[DATE: 01 Jan 1901], the editor has made this specification available
@@ -82,15 +44,12 @@ <h2 class="no-num no-toc" id="w3c-doctype">[LONGSTATUS] [DATE: 3 August 2002]</h
href="http://www.openwebfoundation.org/legal/the-owf-1-0-agreements/owfa-1-0">Open Web Foundation Agreement Version 1.0</a>,
which is available at
http://www.openwebfoundation.org/legal/the-owf-1-0-agreements/owfa-1-0.
<div class=w3conly><!--copyright--></div>

</div>
</div>


<div class=publish>
<hr class=top>

<h2 class="no-num no-toc" id="abstract">Abstract</h2>
<h2 class="no-num no-toc" id="abstract">Abstract</h2>

<p>This document defines a mechanism to enable client-side cross-origin
requests. Specifications that enable an API to make cross-origin requests
@@ -104,51 +63,6 @@ <h2 class="no-num no-toc" id="abstract">Abstract</h2>




<h2 class="no-num no-toc" id="sotd">Status of this Document</h2>

<p><em>This section describes the status of this document at the time of
its publication. Other documents may supersede this document. A list of
current W3C publications and the latest revision of this technical report
can be found in the
<a href="http://www.w3.org/TR/">W3C technical reports index</a> at
http://www.w3.org/TR/.</em></p>

<p>This is the [DATE: 3 August 2002] [LONGSTATUS] of
Cross-Origin Resource Sharing. Please send comments to
<a href="mailto:public-webapps@w3.org?subject=%5BCORS%5D%20">public-webapps@w3.org</a>
(<a href="http://lists.w3.org/Archives/Public/public-webapps/">archived</a>)
<em>by 1 May 2012</em> with <samp>[CORS]</samp> at the start of
the subject line.

<p>This document was produced jointly by the
<a href="http://www.w3.org/2008/webapps/">Web Applications</a> (WebApps)
and
<a href="http://www.w3.org/2011/webappsec/">Web Application Security</a>
(WebAppSec) Working Groups, and published by the WebAppSec Working Group.

<p>This document was produced by two groups operating under the
<a href="http://www.w3.org/Consortium/Patent-Policy-20040205/">5 February 2004
W3C Patent Policy</a>. W3C maintains a
<a rel="disclosure" href="http://www.w3.org/2004/01/pp-impl/49309/status">public
list of any patent disclosures</a> made in connection with the deliverables of
the group; that page also includes instructions for disclosing a patent. An
individual who has actual knowledge of a patent which the individual believes
contains
<a href="http://www.w3.org/Consortium/Patent-Policy-20040205/#def-essential">Essential
Claim(s)</a> must disclose the information in accordance with
<a href="http://www.w3.org/Consortium/Patent-Policy-20040205/#sec-Disclosure">section
6 of the W3C Patent Policy</a>.</p>

<p>Publication as a Working Draft does not imply endorsement by the
<abbr title="World Wide Web Consortium">W3C</abbr> Membership. This
is a draft document and may be updated, replaced or obsoleted by other
documents at any time. It is inappropriate to cite this document as other
than work in progress.</p>
</div>



<h2 class="no-num no-toc" id="toc">Table of Contents</h2>

<!-- toc -->
@@ -1 +1 @@
The repository for [Cross-Origin Resource Sharing](http://dvcs.w3.org/hg/cors/raw-file/tip/Overview.html).
The repository for [Cross-Origin Resource Sharing](http://fetch.spec.whatwg.org/).

0 comments on commit d94f992

Please sign in to comment.
You can’t perform that action at this time.