Re: [ServiceWorker] Privacy consideration about the "cache" parameter of the Request object (#585)

For cross-origin 'without credentials' (the default) XHRs Gecko is using a distinct cache area called 'anonymous'.  There is more - the anonymous context means to not send out any authorization headers, cookies, and to not use the standard cache (that is populated when you visit the page/load the resource as part of the page content.)

We could do the same here?

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/585#issuecomment-73511537