Last Call: Cross-Origin Resource Sharing

The Web Application Security Working Group has published a Working Draft of Cross-Origin Resource Sharing. This document, produced jointly with the Web Applications Working Group, defines a mechanism to enable client-side cross-origin requests. Specifications that enable an API to make cross-origin requests to resources can use the algorithms defined by this specification. If such an API is used on http://example.org resources, a resource on http://hello-world.example can opt in using the mechanism described by this specification (e.g., specifying Access-Control-Allow-Origin: http://example.org as response header), which would allow that resource to be fetched cross-origin from http://example.org. Comments are welcome through 1 May 2012. Learn more about the Rich Web Client Activity.