[asterisk-commits] dlee: branch dlee/stasis-http r383162 - /team/dlee/stasis-http/res/

[SVN commits to the Asterisk project]

Author: dlee
Date: Thu Mar 14 23:41:32 2013
New Revision: 383162

URL: http://svnview.digium.com/svn/asterisk?view=rev&rev=383162
Log:
Filled in CORS 6.2, #2 comments

Modified:
    team/dlee/stasis-http/res/res_stasis_http.c

Modified: team/dlee/stasis-http/res/res_stasis_http.c
URL: http://svnview.digium.com/svn/asterisk/team/dlee/stasis-http/res/res_stasis_http.c?view=diff&rev=383162&r1=383161&r2=383162
==============================================================================
--- team/dlee/stasis-http/res/res_stasis_http.c (original)
+++ team/dlee/stasis-http/res/res_stasis_http.c Thu Mar 14 23:41:32 2013
@@ -190,8 +190,17 @@
 		return;
 	}
 
-	/* CORS 6.2, #2 - "Note: Always matching is acceptable since the list of
-	 * origins can be unbounded."
+	/* CORS 6.2, #2 - "If the value of the Origin header is not a
+	 * case-sensitive match for any of the values in list of origins do not
+	 * set any additional headers and terminate this set of steps.
+	 *
+	 * "Always matching is acceptable since the list of origins can be
+	 * unbounded.
+	 *
+	 * "The Origin header can only contain a single origin as the user agent
+	 * will not follow redirects.
+	 *
+	 * TODO - pull list of allowed origins from config
 	 */
 
 	/* CORS 6.2, #3 - "If there is no Access-Control-Request-Method header