Re: [fetch] Add new Access-Control-Suppress-Headers CORS response header (#253)

Can you provide an example of when you wouldn't want a certain header to be exposed? But you still want to send that header to the client?

I.e. if there are certain headers that you know you don't want the client to see, why send them at all?

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/253#issuecomment-198239459