Re: [fetch] referrer same-origin constraint is a footgun for people trying to "copy" a Request (#245)

Bad header values in CORS result in a network error. Forbidden headers throw in the Headers classd (and invalid values are accepted without question, not ignored).

I wonder what @jakearchibald and @domenic think about this.

(Note that saying this is about setter/getter is confusing, since these attributes only have a getter. You can influence what they return through the constructor, but there's a number of reasons why you cannot create all the kinds of objects a user agent can.)

---
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/245#issuecomment-195696976