Re: [whatwg/fetch] Adjust wildcard handling slightly (#592)

If credentials is "include" request's method needs to be in _methods_ or needs to be safelisted. If credentials is not "include" request's method needs to be in _methods_, needs to be safelisted, or _methods_ needs to contain *.

So I think the requirement is more like this:

> If request's method is not in _methods_, request's method is not safelisted, and if credentials is not "include", _methods_ does not contain *, then return a network error.

We could also word that as:

> If request's method is not in _methods_ and request's method is not safelisted, then:
> * If credentials is not "include" and _methods_ does not contain *, then return a network error.
> * If credentials is "include", then return a network error.

If the first variant is not clear enough. WDYT?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/592#issuecomment-326509824