- From: sirdarckcat <notifications@github.com>
- Date: Sun, 19 Jul 2015 09:33:58 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
Received on Sunday, 19 July 2015 16:34:28 UTC
why is it a problem without redirects? in what other case would a cached response be dangerous? in this case it seems dangerous since most websites have open redirects, so an attacker could fool a SW to cache a CORS-enabled Response object for a same-origin Request. -- Eduardo On Thu, Jul 16, 2015 at 10:17 AM, Anne van Kesteren < notifications@github.com> wrote: > Sure, but that's also a problem without redirects... > > — > Reply to this email directly or view it on GitHub > <https://github.com/whatwg/fetch/issues/79#issuecomment-121873995>. > --- Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/79#issuecomment-122679083
Received on Sunday, 19 July 2015 16:34:28 UTC