[whatwg/fetch] Extend Cross-Origin-Resource-Policy to take origin values (#760)

In #687 there was a strong interest, notably by @arturjanc, to make `Cross-Origin-Resource-Policy` accept literal origins.

Things to decide:

* Multiple values or not.
* Byte-for-byte matching after any splitting if we do multiple values (yes please).

This also means we can no longer fail open. E.g., the tests in https://github.com/web-platform-tests/wpt/pull/11427 would have to be flipped so they expect rejection instead since we do not know that the unrecognized values are not origins.

cc @johnwilander @youennf 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/760