On Sat, Oct 11, 2008 at 11:29 PM, Jonas Sicking <[EMAIL PROTECTED]> wrote:
> Collin Jackson wrote:
[snip]
>> If a cookie is set with a
>> "sameOrigin" flag, we could prevent that cookie from being sent on
>> HTTP requests that are initiated by other origins, or were made by
>> frames with ancestors
Excerpt:
"prevents script from reading the document.cookies DOM attribute."
http://www.whatwg.org/specs/web-apps/current-work/#sandboxed-origin-browsing-context-flag
Should this be |document.cookie| instead of document.cookies?
Garrett
I have written an implementation of a websocket client and server for
testing my proposed protocol. Testing in the real world has provided me
some good information on what works and what doesn't, particularly in
regards to relaying through public anonymous proxies. Those wishing to
experiment w