Re: [slightlyoff/ServiceWorker] Foreign fetch vs non-credentialed requests (#878)

The reason we have requests without credentials is to simplify the setup for a fetchee to share its data and to make that more common case reasonably safe. They do not protect the fetcher, since the credentials are from the fetchee.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/878#issuecomment-210413127