Re: [whatwg/fetch] Listing headers safe only for certain values is a bad idea (#313) from Jonas Sicking on 2016-09-09 (public-webapps-github@w3.org from September 2016)

From: Jonas Sicking <notifications@github.com>
Date: Thu, 08 Sep 2016 21:04:45 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Message-ID: <whatwg/fetch/issues/313/245813820@github.com>

If you think that server authors will not fully understand the purpose of CORS preflight, then I think that is an argument for keeping the rules of CORS preflight simple. Whitelisting only certain values of a header is not simple.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/313#issuecomment-245813820

Received on Friday, 9 September 2016 04:05:17 UTC