Re: [whatwg/xhr] Allow developers to opt-out of sync XHR with feature policy (#178) from Eli Grey on 2018-01-16 (public-webapps-github@w3.org from January 2018)

From: Eli Grey <notifications@github.com>
Date: Tue, 16 Jan 2018 21:27:55 +0000 (UTC)
To: whatwg/xhr <xhr@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/xhr/issues/178/358112063@github.com>

Why specifically single-out sync XHR? There are many other UX responsiveness DoS mechanisms remaining.

I feel like if you want to use feature policy headers to control responsiveness, then we need a feature policy for blocking JavaScript execution entirely.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/xhr/issues/178#issuecomment-358112063

Received on Tuesday, 16 January 2018 21:28:23 UTC