Access Control for Cross-site Requests

The Web Application Formats Working Group has published a Working Draft of Access Control for Cross-site Requests. This document introduces an "opt-in policy" mechanism whereby people managing a resource can declare whether other sites can retrieve it. The document also defines a mechanism based on the same policy to allow a resource to opt-in to requests using an HTTP method other than GET. Learn more about the Rich Web Client Activity.