Re: [whatwg/fetch] From-Origin (#687)

I think From-Origin (or whatever we call it) should apply to redirect responses.

In WebKit we are moving redirect logic to the network process as much as possible, including moving relevant CSP checks there, so we would not want a remaining potential channel to leak redirect responses.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/687#issuecomment-390239844