Re: [whatwg/fetch] From-Origin (#687)

A new issue came up in our discussions. Should blocks due to From-Origin be opaque to the loading document? For document loads, failing the load explicitly reveals the existence of the document, which may sensitive.

We could instead cancel the load, log a console message, and dispatch a DOM load event to the destination frame.

If so, should we be equally opaque about other subresource blocks due to From-Origin to make the behavior consistent? If not, an empty successful load might also reveal the existence of a document since we would instead emit an error if the resource type was different.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/687#issuecomment-385470743