This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.
After the spec update that sets Origin to "null", it shouldn't be necessary to require resources to split on space and check against each token anymore.
http://dvcs.w3.org/hg/cors/rev/5a33e330c9b3