[tor-commits] [torspec/master] We also need to ignore CORS requests.

[nickm at torproject.org]

commit cd3296c95e7f2c3639e9b6518a29b80100bece4a
Author: Mike Perry <mikeperry-git at fscked.org>
Date:   Tue Oct 9 11:26:05 2012 -0700

    We also need to ignore CORS requests.
---
 proposals/xxx-mapaddress-tor-status.txt |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/proposals/xxx-mapaddress-tor-status.txt b/proposals/xxx-mapaddress-tor-status.txt
index ddb1a1f..c226781 100644
--- a/proposals/xxx-mapaddress-tor-status.txt
+++ b/proposals/xxx-mapaddress-tor-status.txt
@@ -85,6 +85,10 @@ Design: Request Servicing
 
  In particular: 
 
+ Any requests that contain the Origin: header MUST be ignored,
+ as the Origin: header is only included for third party web content
+ (CORS).
+
  dns-nonce fields MUST be omitted if the HTTP Host: header does not
  match the IP address 127.84.111.114.