commit cd3296c95e7f2c3639e9b6518a29b80100bece4a Author: Mike Perry <mikeperry-git@fscked.org> Date: Tue Oct 9 11:26:05 2012 -0700 We also need to ignore CORS requests. --- proposals/xxx-mapaddress-tor-status.txt | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) diff --git a/proposals/xxx-mapaddress-tor-status.txt b/proposals/xxx-mapaddress-tor-status.txt index ddb1a1f..c226781 100644 --- a/proposals/xxx-mapaddress-tor-status.txt +++ b/proposals/xxx-mapaddress-tor-status.txt @@ -85,6 +85,10 @@ Design: Request Servicing In particular: + Any requests that contain the Origin: header MUST be ignored, + as the Origin: header is only included for third party web content + (CORS). + dns-nonce fields MUST be omitted if the HTTP Host: header does not match the IP address 127.84.111.114.