Re: [ServiceWorker] "no-cors" CSS SOP violation (#719)

Ping @davidben @mikewest

We have two options here:

1. Declare CSS-triggered fetches as "page visible" as they are with script-triggered fetches. However, this is leaking new data when it comes to URLs that don't appear in computed styles. Eg font sources, @import urls.
2. [as Anne suggests](https://bugzilla.mozilla.org/show_bug.cgi?id=1180145#c3), remove these from the resource timing API & bypass serviceworker for these requests.

This *will* trip developers up who host their CSS on a CDN, as it's less likely to have access-control-allow-origin, but it's not worth breaking the web over.

---
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/719#issuecomment-120968886