Anne van Kesteren. Access Control for Cross-Site Requests. 12 September 2008. W3C Working Draft. (Work in progress.) URL: http://www.w3.org/TR/2008/WD-access-control-20080912