Re: [whatwg/fetch] "With Credentials" flag possibly inconsistent with web architecture (#517)

What I'm saying is that if you set `Access-Control-Allow-Origin: *` in error, but in a way that today does not leak anything, this would leak a bit.

Anyway, past all that, even if everyone was comfortable making that change (it's unclear to me who besides timbl is asking for this), it's unclear to me how to make this work given that we cannot extend `TypeError`. (Using `DOMException` with a custom message seems rather error prone as that field is up to the user agent and it would break with the exception we use today which means existing higher level libraries that operate on the exception might get confused.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/517#issuecomment-436616118