Re: [w3c/ServiceWorker] Foreign fetch vs non-credentialed requests (#878)

https://twitter.com/josh_triplett/status/781482468486488064 long thread, but a lot of concern that an `<img>` could now allow another origin to execute JS.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/878#issuecomment-250501435