<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: accesscontrol</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/accesscontrol.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-11-19T08:40:34+00:00</updated><author><name>Simon Willison</name></author><entry><title>The March of Access Control</title><link href="https://simonwillison.net/2008/Nov/19/john/#atom-tag" rel="alternate"/><published>2008-11-19T08:40:34+00:00</published><updated>2008-11-19T08:40:34+00:00</updated><id>https://simonwillison.net/2008/Nov/19/john/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://ejohn.org/blog/the-march-of-access-control/"&gt;The March of Access Control&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
The W3C Access Control specification is set to become a key technology in enabling secure cross-domain APIs within browsers, and since it addresses a legitimate security issue on the web I hope and expect it will be rolled out a lot faster than most other specs.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/accesscontrol"&gt;accesscontrol&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/browsers"&gt;browsers&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/crossdomain"&gt;crossdomain&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/internet-explorer"&gt;internet-explorer&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/john-resig"&gt;john-resig&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;&lt;/p&gt;



</summary><category term="accesscontrol"/><category term="browsers"/><category term="crossdomain"/><category term="internet-explorer"/><category term="john-resig"/><category term="security"/></entry><entry><title>Cross-Site XMLHttpRequest</title><link href="https://simonwillison.net/2008/Jan/9/crosssite/#atom-tag" rel="alternate"/><published>2008-01-09T23:57:00+00:00</published><updated>2008-01-09T23:57:00+00:00</updated><id>https://simonwillison.net/2008/Jan/9/crosssite/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://developer.mozilla.org/en/docs/Cross-Site_XMLHttpRequest"&gt;Cross-Site XMLHttpRequest&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
“Firefox 3 implements the W3C Access Control working draft, which gives you the ability to do XMLHttpRequests to other web sites”—you can mark a document as available for cross-domain requests using either an Access-Control HTTP header or an XML processing instruction.

    &lt;p&gt;&lt;small&gt;&lt;/small&gt;Via &lt;a href="http://ejohn.org/blog/cross-site-xmlhttprequest/"&gt;John Resig&lt;/a&gt;&lt;/small&gt;&lt;/p&gt;


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/accesscontrol"&gt;accesscontrol&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/ajax"&gt;ajax&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/crossdomain"&gt;crossdomain&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/firefox"&gt;firefox&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/firefox3"&gt;firefox3&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/http"&gt;http&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/javascript"&gt;javascript&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/john-resig"&gt;john-resig&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/mozilla"&gt;mozilla&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/w3c"&gt;w3c&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/xml"&gt;xml&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/xmlhttprequest"&gt;xmlhttprequest&lt;/a&gt;&lt;/p&gt;



</summary><category term="accesscontrol"/><category term="ajax"/><category term="crossdomain"/><category term="firefox"/><category term="firefox3"/><category term="http"/><category term="javascript"/><category term="john-resig"/><category term="mozilla"/><category term="w3c"/><category term="xml"/><category term="xmlhttprequest"/></entry></feed>