Re: [whatwg/fetch] should CSP be checked on each redirect? (#485)

> Also, can someone verify what should be returned in the case of a redirect CSP failure? Should the entire request result in a NetworkError or should the last 30x response before the policy failure be returned?

FWIW I think the safest course here would be to return a NetworkError.  Gecko currently returns the 30x response,  but I'd like to change it.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/485#issuecomment-278763351