Re: [whatwg/fetch] From-Origin (#687)

> These seem reasonable from my perspective. Regarding "Support same/same-site values", though, I'd point again at @arturjanc's suggestion that same and same-site isn't going to be granular enough for applications with interesting cross-origin relationships.

It makes sense to make this header value consistent with other similar mechanisms.
I believe a list of origins is allowed in CSP frame ancestors.
If that is used in the wild, it makes sense to support multiple origins in this new header as well.
Conversely, we might envision supporting same-site in CSP frame ancestors.

> @youennf: would you prefer to raise a From-Origin-specific error? If so, why?

A network error seems consistent with other fetch error handling.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/687#issuecomment-390722953

Received on Monday, 21 May 2018 17:24:11 UTC