Re: [whatwg/fetch] CORS: why is Authorization request header forcing preflight? (#770) from Anne van Kesteren on 2018-06-27 (public-webapps-github@w3.org from June 2018)

From: Anne van Kesteren <notifications@github.com>
Date: Wed, 27 Jun 2018 02:43:22 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/770/400610370@github.com>

We really cannot add `Authorization` to the safelist for aforementioned reasons. Alternatives can be considered, but at this point it seems better to start a new issue on those, if any.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/770#issuecomment-400610370

Received on Wednesday, 27 June 2018 09:43:44 UTC