Re: [whatwg/fetch] "With Credentials" flag possibly inconsistent with web architecture (#517)

>From our last [meeting with @mikewest ](https://github.com/w3ctag/meetings/blob/gh-pages/2018/07-seattle/07-26-minutes.md#mike-west-discussion-with-credentials)

> Yves: we came up with .. define a new error type when withCredential used and ACAO: *. Jonas Sicking was in favor of this. Something more specific then generic Network Error.
> 
> Mike: Is this part of the promise t?hen pipeline?
> 
> Yves: yes, it would bubble out.
> 
> Mike: Seems fine. Data it leaks is fairly minor. Leakage probably has no real impact.

As far as violating the design contract or CORS, the current situation violates the design contract or URL and venture in the "URL+Context" that was in WS-Addressing and EndPoint References...

@mikewest would your "probably" statement in the minute be confirmed or clarified ?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/517#issuecomment-434266110

Received on Tuesday, 30 October 2018 11:32:45 UTC