Re: [whatwg/fetch] Block subresource requests whose URLs include credentials. (#465)

I'm developing Selenium Tests with Cucumber. We have a test environment with Basic Authentication.

Unfortunately Chrome completes relative URLs on the Website with the full Authentication URL,
e.g.: `/page` becomes `https://user:password@domain.com/page` and is blocked by Chrome.
So many links e.g. for CSS are broken.

I expect, after Chrome has been authentificated by the URL, adding only the URL without authentification information to relative links and not to block them, e.g. `https://domain.com/page`, as it does with the address bar (hiding the auth information).

In my opinion it doesn't make sense, that Chrome completes URLs with information that is not allowed by itself.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/465#issuecomment-307341332