Re: [whatwg/fetch] Should Content-Type header be stripped when redirecting from POST to GET? (#609) from Anne van Kesteren on 2018-02-21 (public-webapps-github@w3.org from February 2018)

From: Anne van Kesteren <notifications@github.com>
Date: Wed, 21 Feb 2018 01:56:09 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/609/367271697@github.com>

The web platform follows redirects (and includes any headers on them), by default. And exposing redirects is a security concern at this point (unless they provide some opt-in I'm okay to be read header we haven't defined yet). So yeah, redirects are just different on "web platform HTTP" I guess.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/609#issuecomment-367271697

Received on Wednesday, 21 February 2018 09:57:28 UTC