Re: [whatwg/fetch] Delay network errors to prevent port scanning (#338)

The linked presentation specifically talks about websockets and the rate limits built into that spec - and then talks about workers being able to bypass the rate limit - Firefox doesn't allow that (because the limit is global).

But that's a small detail - the issue, to the extent this is an issue at all, is much broader that websockets.

I'm not convinced this is a huge exposure, but its certainly worth a little text explaining what same-origin protects you against and what it doesn't.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/338#issuecomment-234666254