Section 1.3 of the May 31 version of the XBL 2.0 spec [1] states:
[[
However, it is strongly suggested that an access control mechanism
(such as that described in [2]) be used to prevent such cross-domain
accesses unless the remote site has allowed accesses.
]]
On May 17 the W3C published a revised version of [2] at [3]. If you
have any comments about [3] please send them to public-
[EMAIL PROTECTED] (archived at [4]).
Regards,
Art Barstow
===
[1] http://www.mozilla.org/projects/xbl/xbl2.html
[2] http://www.w3.org/TR/2005/NOTE-access-control-20050613/
[3] http://www.w3.org/TR/access-control/
[4] http://lists.w3.org/Archives/Public/public-appformats/