CORP is about allowing a Spectre-read gadget to potentially get at your data. It's not an assertion that it's fine to make that data public. Otherwise we might as well have required CORS there as the initial design did. -- GitHub Notification of comment by annevk Please view or discuss this issue at https://github.com/w3c/csswg-drafts/issues/5165#issuecomment-654161728 using your GitHub accountReceived on Monday, 6 July 2020 10:53:44 UTC
This archive was generated by hypermail 2.4.0 : Tuesday, 5 July 2022 06:42:11 UTC