Re: [whatwg/fetch] Only-if-cached (#159)

krijnhoetmer.nl is currently inaccessible so I can't read the discussion that led to removing `only-if-cached`.  I'm assuming the attack vector there was a privacy leak using this cache mode to see if an arbitrary URL has already been visited.

It's unclear to me what same-origin here means exactly, as @annevk mentioned.  Also, if it's about the origin actually being fetched, how is a redirect from same-origin to cross-origin and back to same-origin supposed to be handled?

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/159#issuecomment-210161642