Re: [whatwg/fetch] Allow setting `cookie` header in credential-less CORS requests (#268)

I think the scale is substantially different: my server can hammer yours for a few hours before you get a firewall alert and block my IP address. It's substantially more difficult to block a few hundred browsers from doing the same.

*shrug* "`curl` can do it!" doesn't seem like a good reason to add functionality.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/268#issuecomment-205804871