Re: [fetch] Add a bit to Opaque Responses to distinguish redirects (#79)

> I thought @slightlyoff was wanting to retain "legitimate" redirects.

Sure, but how is your proposal different in terms of processing from what I wrote?

> There's a further question on whether we should allow entries in the cache where request.url has a different origin to response.url

As I said elsewhere, this is getting into nutty territory and doesn't defend against same-origin -> cross-origin -> same-origin.

Also, even if we solve this for navigation, that still leaves all other cases open, so I don't think that makes much sense.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/79#issuecomment-125270028