- From: Anne van Kesteren <notifications@github.com>
- Date: Fri, 16 Nov 2018 05:48:32 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 16 November 2018 13:48:54 UTC
This also addresses #737 in that now A -> B -> A would be considered cross-origin even for "no-cors", but leaving that open for further plumbing in HTML et al to override that in select cases (e.g., <img>).
Fixes #756.
You can view, comment on, or merge this pull request online at:
https://github.com/whatwg/fetch/pull/834
-- Commit Summary --
* Take tainted origin flag into account for the same origin check
-- File Changes --
M fetch.bs (4)
-- Patch Links --
https://github.com/whatwg/fetch/pull/834.patch
https://github.com/whatwg/fetch/pull/834.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/834
Received on Friday, 16 November 2018 13:48:54 UTC