Re: [websec] X-Requested-With header field

Peter Saint-Andre <stpeter@stpeter.im> Tue, 13 December 2011 16:02 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35B6121F8B13 for <websec@ietfa.amsl.com>; Tue, 13 Dec 2011 08:02:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.271
X-Spam-Level:
X-Spam-Status: No, score=-103.271 tagged_above=-999 required=5 tests=[AWL=-0.672, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XELqWQnon7XT for <websec@ietfa.amsl.com>; Tue, 13 Dec 2011 08:02:54 -0800 (PST)
Received: from stpeter.im (mailhost.stpeter.im [207.210.219.225]) by ietfa.amsl.com (Postfix) with ESMTP id BF88421F8B17 for <websec@ietf.org>; Tue, 13 Dec 2011 08:02:54 -0800 (PST)
Received: from dhcp-64-101-72-124.cisco.com (unknown [64.101.72.124]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 0C637423AD; Tue, 13 Dec 2011 09:10:28 -0700 (MST)
Message-ID: <4EE771DC.7050600@stpeter.im>
Date: Tue, 13 Dec 2011 08:40:12 -0700
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:8.0) Gecko/20111105 Thunderbird/8.0
MIME-Version: 1.0
To: Julian Reschke <julian.reschke@gmx.de>
References: <4EE727C4.3020606@gmx.de>
In-Reply-To: <4EE727C4.3020606@gmx.de>
X-Enigmail-Version: 1.3.3
OpenPGP: url=https://stpeter.im/stpeter.asc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: "websec@ietf.org" <websec@ietf.org>
Subject: Re: [websec] X-Requested-With header field
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Dec 2011 16:02:57 -0000

On 12/13/11 3:24 AM, Julian Reschke wrote:

> it seems this header field is widely implemented. Is it here to stay? If
> so, shouldn't it be documented somewhere?

+1, even if it does start with that ugly "X-" string. :)