Re: [whatwg/fetch] Avoid using the CORS flag to reset request's origin in redirects (#594)

Hmm, should we change the first conditional of step 5 of main fetch to:

> request's current url's origin is same origin with request's origin, CORS flag is unset, and either request's tainted origin flag is unset or request's mode is not "cors"

I think setting the CORS flag would not work since that would make "no-cors" follow CORS code paths.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/594#issuecomment-394988234