Re: [whatwg/fetch] Allow setting `cookie` header in credential-less CORS requests (#268)

Ah, I missed that. If we preflight the request, then I think you've taken care of the security concerns.

I still don't understand the use case, though. :)

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/268#issuecomment-205841435