2010 May 7, 6:29UMP instead of CORS for cross-domain access control: "...a developer can read only UMP and ignore CORS, yet still create safe code. This code can successfully message with CORS resources that do not
require credentials. UMP is therefore a way of messaging with the credential-free subset of CORS resources."
w3c security web browser technical
Some rights reserved