Re: [whatwg/fetch] Handling Partial Content / 206 (#144)

I'm a little concerned with

> If the media element consumes opaque data, the first URL in each response's URL list must be identical.

from Attack 2. In particular if that's what we want to do in the face of redirects. If anything we probably want to compare the last URL. (Safer would be the whole list, but unfortunately no-cors cross-origin to same-origin is non-opaque.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/144#issuecomment-368426534

Received on Monday, 26 February 2018 08:42:26 UTC