Re: [fetch] Block 'image/*' resources loaded as script. (#261)

> @@ -3358,6 +3365,27 @@ <h4 id="should-response-to-request-be-blocked-due-to-nosniff?"><dfn title="shoul
>   <li><p>Return failure.
>  </ol>
>  
> +<h3 id="should-response-to-request-be-blocked-due-to-mime-type?"><dfn title="should response to request be blocked due to mime type">Should
> +<var>response</var> to <var>request</var> be blocked due to its MIME type?</dfn></h3>
> +
> +<p>Run these steps:
> +
> +<ol>
> + <li><p>Let <var>MIMEType</var> be the result of
> + <span title=concept-header-extract-mime-type>extracting a MIME type</span> from
> + <var>response</var>'s <span title=concept-response-header-list>header list</span>.
> +
> + <li><p>Let <var>type</var> be <var>request</var>'s
> + <span title=concept-request-type>type</span>.
> +
> + <li><p>If <var>type</var> is "<code title>script</code>", and <var>MIMEType</var>
> + begins with `<code title>image/</code>`, return <b title>blocked</b>.

Let's do "starts with" after JavaScript. Also, ", then return ..."

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/261/files/9426119f0c418f54c65a3493294c449d7780e6b5#r57318643