Re: [ServiceWorker] Prevent opaque requests being used in response to client requests (#590)

My reasoning was not very sound I think. A request for a client is obviously same-origin with the client due to service workers having to be same-origin. Therefore, requiring a basic response seems fine.

@jakearchibald would this change work:

In https://fetch.spec.whatwg.org/#http-fetch we introduce a new substep within step 2 that returns a network error if *request* is a client request and response's type is not "basic" or "default".

Also paging @nikhilm and @wanderview for additional review.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/590#issuecomment-89757518

Received on Sunday, 5 April 2015 12:10:38 UTC