Re: [whatwg/fetch] Cross-Origin Read Blocking (CORB) (#681)

Quick status update:
- Making progress on a [PR with Fetch spec changes](https://github.com/whatwg/fetch/pull/686) covering nosniff and 206 behavior
- For the last 2+ weeks we've beein running a 5% field trial of site-per-process on Chrome 66 stable channel - this also gives coverage for CORB.  So far no issues were reported, but through telemetry (e.g. looking at some of the top 100 sites most often impacted by CORB) we've discovered previously unknown cases of html/js polyglots (see https://crbug.com/839945 and https://crbug.com/839425).  Fixing handling of the polyglots will require small tweaks of CORB confirmation sniffing for HTML (and probably reinforces the earlier decision to start with spec-ing only the nosniff/206 cases first).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/681#issuecomment-387166651