Re: [whatwg/fetch] Same-origin data-URL flag only for fetch and XHR? (#381)

@youennf Blink is opposed to making data URLs same-origin. https://bugzilla.mozilla.org/show_bug.cgi?id=255107 has some of their rationale. However, Blink does treat data URLs as same-origin in certain contexts (when not the result of a redirect): `XMLHttpRequest`, `fetch()`, and I guess `<img>` (not yet specified). Apparently the way that is implemented is suboptimal, but hopefully they can fix that.

I think my takeaway from this issue is that we should use this flag for `<img>`. Not sure if there's an issue on that already. @zcorpan?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/381#issuecomment-245317872