Re: [whatwg/fetch] Should "set response's CSP list" be in Main fetch? (#364) from Mike West on 2017-01-13 (public-webapps-github@w3.org from January 2017)

From: Mike West <notifications@github.com>
Date: Fri, 13 Jan 2017 04:51:21 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/364/272436237@github.com>

Yes. We put it that far down in the algorithm so that we'd be able to check the policy for the response when processing the `set-cookie` header. We could move it around now that we've punted on cookie-related changes in CSP.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/364#issuecomment-272436237

Received on Friday, 13 January 2017 12:51:53 UTC