errata logo graphic

Found 1 record.

Status: Rejected (1)

RFC6454, "The Web Origin Concept", December 2011

Source of RFC: websec (app)

Errata ID: 3249

Status: Rejected
Type: Technical

Reported By: Anne van Kesteren
Date Reported: 2012-06-08
Rejected by: Barry Leiba
Date Rejected: 2012-06-10

Section 7.1. Syntax says:

origin              = "Origin:" OWS origin-list-or-null OWS
origin-list-or-null = %x6E %x75 %x6C %x6C / origin-list
origin-list         = serialized-origin *( SP serialized-origin )

It should say:

origin              = "Origin:" OWS origin-or-null OWS
origin-or-null      = %x6E %x75 %x6C %x6C / serialized-origin

Notes:

Rationale: List of origins was added for CORS http://www.w3.org/TR/cors/ but CORS does not require it and we should leave this as a choice.

This syntax restriction also has limited impact on 7.2. and 7.3.

See also: http://lists.w3.org/Archives/Public/www-archive/2012Jun/thread.html#msg1
--VERIFIER NOTES--
This should be considered if/when the document is worked on again, but it is not an "error" in the original document -- rather, it's something that's come up since -- and so it's not appropriate for errata.


Report New Errata