- From: Ben Kelly <notifications@github.com>
- Date: Mon, 27 Jul 2015 07:55:41 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
Received on Monday, 27 July 2015 14:56:14 UTC
> Disallowing cross-origin CORS responses in response to "same-origin" navigation requests would help mitigate the navigation case. @annevk - we were trying to think of why we might need this restriction. This would require blocking synthetic responses for "same-origin" requests as well, right? Its trivial to convert a CORS response into a synthetic response. --- Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/79#issuecomment-125236143
Received on Monday, 27 July 2015 14:56:14 UTC