[Bug 20322] Document the force preflight flag

https://www.w3.org/Bugs/Public/show_bug.cgi?id=20322

--- Comment #6 from Anne <annevk@annevk.nl> ---
It seems there is a bug in the specification. We should not be dispatching
upload progress events unless that flag is set. Otherwise event listeners
registered after send() is invoked will still get events.

It's not entirely clear to me how you cannot figure out the server exists with
just <img>, but I guess it makes timing attacks even easier maybe? Still feels
somewhat sketchy.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.

Received on Tuesday, 12 November 2013 06:30:16 UTC