Relative Content

Tag Archive for xmlhttprequest

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

HTTP resource bundling/streaming practice

Our SPA (plain HTML and Javascript) makes use of huge volume of javascript and other resources that are downloaded via XHR. Given the sheer number of components and browser simultaneous request limits, we’re thinking for ways to deliver our resources in a more efficient manner.

How do web servers enforce the same-origin policy?

I’m diving deeper into developing RESTful APIs and have so far worked with a few different frameworks to achieve this. Of course I’ve run into the same-origin policy, and now I’m wondering how web servers (rather than web browsers) enforce it. From what I understand, some enforcing seems to happen in the browser’s end (e.g., honoring an Access-Control-Allow-Origin header received from a server). But what about the server?

How do web servers enforce the same-origin policy?

I’m diving deeper into developing RESTful APIs and have so far worked with a few different frameworks to achieve this. Of course I’ve run into the same-origin policy, and now I’m wondering how web servers (rather than web browsers) enforce it. From what I understand, some enforcing seems to happen in the browser’s end (e.g., honoring an Access-Control-Allow-Origin header received from a server). But what about the server?