Re: [slightlyoff/ServiceWorker] Foreign fetch vs non-credentialed requests (#878)

Yeah, once you allow script, all bets are off. This is basically turning `@font-face` (and all other fetchers) into `<iframe>` elements. This might be surprising to certain As, but it doesn't really change anything fundamentally. If A doesn't want this, it should not use third parties.

Now that we've gone back and forth a bit on it though, I could imagine the media having a field day with this once they find out.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/slightlyoff/ServiceWorker/issues/878#issuecomment-210550561