w3.org news: Access Control for Cross-site Requests

2008-02-14: The Web Application Formats Working Group has published the Working Draft of Access Control for Cross-site Requests. Web application technologies commonly apply same-origin restrictions to network requests. These restrictions prevent a Web application running from one origin from obtaining data retrieved from another origin, and also limit the amount of unsafe HTTP requests that can be automatically launched toward destinations that differ from the running application's origin. This document defines a mechanism to enable client-side cross-site requests. Learn more about the Rich Web Client Activity. (Permalink)

More...