Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:68070 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 19436 invoked from network); 5 Jul 2013 22:48:40 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 5 Jul 2013 22:48:40 -0000 Authentication-Results: pb1.pair.com smtp.mail=rdlowrey@gmail.com; spf=pass; sender-id=pass Authentication-Results: pb1.pair.com header.from=rdlowrey@gmail.com; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.223.171 as permitted sender) X-PHP-List-Original-Sender: rdlowrey@gmail.com X-Host-Fingerprint: 209.85.223.171 mail-ie0-f171.google.com Received: from [209.85.223.171] ([209.85.223.171:52900] helo=mail-ie0-f171.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id A6/9E-41520-34D47D15 for ; Fri, 05 Jul 2013 18:48:40 -0400 Received: by mail-ie0-f171.google.com with SMTP id qd12so6281166ieb.2 for ; Fri, 05 Jul 2013 15:48:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=XxwtUl/kKZ+gQG8/8CXsTth1dWS7IMi5sEgCyjFx2jc=; b=tvdLusPt37jztXXXhLDBdZw4wbHOj3reac1pcjz+tt+dJMQZwNOEmpa8GNXP5fRJuW kf5y+ELl2+x1c1l3upnSjgjMbrEzDitstUN/xGBNlf9VZ/Mm713bGw/7x01mvL8kJKFW zo1HqFUGuLTCXGrroAjBXt6o1GWDLDcN/PrCSafunuWTr+5lq6zmQWzn0qzBATpFge8s uOoZzKhq2QPf7au7UBwQGoBVVxxyLNHOA/sKxjVXdcY9LB2i5mmPLzibhAVXrvX3k/bI zVv6T/yddmR03ItOL6mlIDBh/GOEoVYYo1RuZV09TfjWEjqlK6gqwV3DpHM5uXWW+JMk XIeA== MIME-Version: 1.0 X-Received: by 10.50.171.163 with SMTP id av3mr4856131igc.33.1373064512921; Fri, 05 Jul 2013 15:48:32 -0700 (PDT) Received: by 10.50.7.1 with HTTP; Fri, 5 Jul 2013 15:48:32 -0700 (PDT) Date: Fri, 5 Jul 2013 18:48:32 -0400 Message-ID: To: "internals@lists.php.net" Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: Access-Control-Allow-Origin header in CLI server From: rdlowrey@gmail.com (Daniel Lowrey) This is not the sort of thing that belongs in an HTTP server by default. It's a one-off header that some users may elect to send but the vast majority will not. If you need to simulate the feature of an third-party server mod/plugin you should manually make a `header('Access-Control-Allow-Origin: ...')` as needed in your development code. From an HTTP standpoint, baking this directly into the CLI server doesn't make much sense IMO.