[whatwg/fetch] Do not allow CORS responses to "same-origin" requests (#655)

Tests will be done as part of https://bugzilla.mozilla.org/show_bug.cgi?id=1427978.

Fixes #629.
You can view, comment on, or merge this pull request online at:

  https://github.com/whatwg/fetch/pull/655

-- Commit Summary --

  * Do not allow CORS responses to "same-origin" requests

-- File Changes --

    M fetch.bs (6)

-- Patch Links --

https://github.com/whatwg/fetch/pull/655.patch
https://github.com/whatwg/fetch/pull/655.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/655