On Fri, 18 Jan 2008 05:02:04 +0100, Jonas Sicking <[EMAIL PROTECTED]> wrote:
I think this is a good point though. It's something that we should add to the security considerations so that server implementations are aware of this.
Added an encouragement for authors to check the Referer-Root header to the specification warning for race conditions during a policy change.
-- Anne van Kesteren <http://annevankesteren.nl/> <http://www.opera.com/>
