[whatwg/fetch] CORB: 3xx redirects, 304, 401, and 407 responses (#728)

Should we apply the CORB check to these responses as well?

Currently we only do it for the final response, but if that's not good enough for `From-Origin`, is it good enough for CORB in general? A test for this would be somewhat involved, but you could imagine:
```
HTTP/1.1 302 HEY
Location: elsewhere
Content-Type: text/html
X-Content-Type-Options: nosniff
```

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/728