Re: [fetch] Define the WebSocket client handshake in terms of Fetch (#236)

1. Service workers are dealt with by setting the skip-service-worker flag.
2. HSTS is indeed applied to WebSocket. (It was already by the HTML Standard, this moves it to the Fetch layer from the API layer.)
3. I think the way type/destination etc. are set this should look similar to XMLHttpRequest so I think connect-src would fall out naturally. But yeah, you might need to update it to no longer look for `ws:` and such.

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/236#issuecomment-194271805