Re: [whatwg/fetch] Block subresource requests whose URLs include credentials. (#465) from Mike West on 2017-02-17 (public-webapps-github@w3.org from February 2017)

From: Mike West <notifications@github.com>
Date: Fri, 17 Feb 2017 00:40:06 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/465/c280588982@github.com>

This one I can certainly write tests for, so let's let me do that before we land the spec patch. I plan to land this change in Chrome after the next branch point, and I'm not sure there's much point upstreaming tests before any implementation passes. Perhaps we can put this on hold for a week or three?

I'll file bugs against Safari and Edge to ensure they're aware. Edge shouldn't have much work to do.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/465#issuecomment-280588982

Received on Friday, 17 February 2017 08:40:41 UTC