Anne van Kesteren wrote:
Thanks. So it say the that the origin of the Document object associated with the Window pointer is the origin of the request. With a reference to HTML5 to see what the origin of such a Document object actually is. Or should it simply be the origin of the script?
Those are possibly different origins when someone is doing something like: window.frames[0].XMLHttpRequest right? I agree that it's important to decide which origin to use in this case. -Boris
