Re: [whatwg/fetch] access-conrol-allow-origin: * can be interpreted in two ways (#548)

It seems that if we want to avoid conflicts we should do something with

> (DQUOTE and "(),/:;<=>?@[\]{}").

per https://tools.ietf.org/html/rfc7230#section-3.2.6.

It seems this is a problem for:

* Access-Control-Expose-Headers
* Access-Control-Allow-Methods
* Access-Control-Allow-Headers

but not Access-Control-Allow-Origin (origins cannot be *).

@mnot thoughts? Can we decide not to care about a method or header name which is `*`?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/548#issuecomment-303699162