Re: [fetch] Cache mode: security review (#39)

I think same-origin is too restrictive.
Would it make sense if we were to allow probing for the assets an origin was already aware of?
 - assets that were potentially* placed in the cache by the origin in the past

In other words, if there is nothing new to learn from specific requests, it should be fine to allow them.

*effectively placed or merely requested.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/39#issuecomment-140970984