Re: [whatwg/fetch] Block subresource requests whose URLs include credentials. (#465) from James on 2017-07-07 (public-webapps-github@w3.org from July 2017)

From: James <notifications@github.com>
Date: Fri, 07 Jul 2017 15:00:08 +0000 (UTC)
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/465/c313706495@github.com>

I have code like `/a.css` to the best of my knowledge. I have urls that I hand out to people like `http://admin:pass@staging-site.com` that allows a need to know access to a site without too much fuss. Often this is behind a vpn, or is an obscure domain name.

 I'm just trying to flesh out what exactly is being suggested here, because it's not clear(to me) what you are blocking.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/465#issuecomment-313706495

Received on Friday, 7 July 2017 15:00:41 UTC