- From: Mikeal Rogers <notifications@github.com>
- Date: Fri, 13 Jan 2017 19:45:58 -0800
- To: whatwg/streams <streams@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Saturday, 14 January 2017 03:46:29 UTC
@domenic aren't some of those headers XSS related? I'm assuming that in ServiceWorkers, because you are caching and reconstructing remote requests, you can create responses that appear to be from foreign domains. Maybe this is already solved and those are all blocked or ignored. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/streams/issues/480#issuecomment-272599208
Received on Saturday, 14 January 2017 03:46:29 UTC