- From: Ilya Grigorik <notifications@github.com>
- Date: Tue, 28 Jul 2015 15:25:09 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Message-ID: <whatwg/fetch/issues/93/125770410@github.com>
@ehsan @sicking not claiming this is complete or accurate, but after staring at the Fetch "context" table for a bit, came up with the following...
```
Request {
enum ResourceType { // CSP "Context"
document,
stylesheet, // style-src (style)
script, // script-src (script)
image, // img-src (image, imageset)
media, // media-src (audio, track, video)
font, // font-src (font)
object, // object-src (applet, embed, object)
other
},
enum Initiator {
parser,
css, // style-src?
script, // connect-src (fetch, xhr, beacon, eventsource)
internal // connect-src (cspreport, nelreport, ping)
}
enum Nested{
none,
frame, // child-src
iframe, // child-src
worker // child-src
}
}
```
- ResourceType would cleanly solve the use-case in https://github.com/whatwg/fetch/issues/64 -- just ignore the "context" part of that discussion.
- Separating out initiator does allow to ask new and interesting questions. For example, what's the policy for CSS-initiated image fetches vs parser or script initiated ("same" is valid answer).
- "Nested" is a bit odd but we do have a CSP policy around it and it also is an interesting bit of information to have for prioritization.
---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/93#issuecomment-125770410
Received on Tuesday, 28 July 2015 22:25:39 UTC