Re: [whatwg/fetch] Add a bit to Opaque Responses to distinguish redirects (#79)

We don't need the script exposed getter to return true to solve the original poster's issue.  With the currently spec'd and implemented solution the linked exploit no longer works.  You get a network error page because respondWith() fails due to the state of the internal redirected flag.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/79#issuecomment-237877393

Received on Friday, 5 August 2016 15:15:20 UTC