[x3d-public] Cross Origin Access

[Web3D WebServices]

The entirety of the https://www.web3d.org/x3d/content directory tree has 
been made cross-origin accessible. Existing restricting apply on the 
actual request. That means that a request by a browser running a web 
page from a host different from https://www.web3d.org/ can request 
access to any file in https://www.web3d.org/x3d/content/*. The browser 
should grant Cross Origin access (aka CORS) to that request. The Web3D 
server will separately determine if the request will be granted.

For example, various X3D worlds in 
https://www.web3d.org/x3d/content/examples/Basic can be displayed in 
Andreas' X3DOM viewer at 
https://andreasplesch.github.io/Library/Viewer/index.html, specifically 
https://andreasplesch.github.io/Library/Viewer/index.html?url=https://www.web3d.org/x3d/content/examples/HelloWorld.x3d 
does display this example.

The access controls are a little looser than I would like. I plan on 
tightening them up over the next week for all files not in 
https://www.web3d.org/x3d/content/examples/. If files not in that path 
need CORS support OR files in that path should not have CORS support, 
then please let me know right away.

-- 
*Leonard Daly*
WebServices, Web3D Consortium
President, Daly Realism - /Creating the Future/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20230507/90891b7b/attachment.html>