Re: [whatwg/fetch] Allow * for Access-Control-Expose-Headers (#252)

> …it can only be used for requests where the credentials mode is "omit".

Since XHR only supports `'include'` and `'same-origin'`. **Does that mean that there are no scenarios where an XHR request yields a Access-Control-Expose-Headers with a `*` field value?**

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/252#issuecomment-269131821

Received on Sunday, 25 December 2016 17:58:40 UTC