[Bug 15418] sort out HTTP auth

https://www.w3.org/Bugs/Public/show_bug.cgi?id=15418

--- Comment #10 from Anne <annevk@annevk.nl> ---
So I think if we let this get handled by Fetch it will include the
Authorization header on the first try and then either you will get a 200 or a
403. If you do not include it you might get a 401 and URL's username/password
will be used. I suspect we should let Fetch handle 401's automatically in that
case and otherwise defer to UI (though more testing is needed for
<script>/<img>/...).

(At some point we might want to offer a way in which 401 gets back to
XMLHttpRequest without the UA trying do do smart things. Same with redirects.)

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Saturday, 24 November 2012 08:55:18 UTC