[whatwg/fetch] Take tainted origin flag into account for the same origin check (#834)

This also addresses #737 in that now A -> B -> A would be considered cross-origin even for "no-cors", but leaving that open for further plumbing in HTML et al to override that in select cases (e.g., <img>).

Fixes #756.
You can view, comment on, or merge this pull request online at:

  https://github.com/whatwg/fetch/pull/834

-- Commit Summary --

  * Take tainted origin flag into account for the same origin check

-- File Changes --

    M fetch.bs (4)

-- Patch Links --

https://github.com/whatwg/fetch/pull/834.patch
https://github.com/whatwg/fetch/pull/834.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/834

Received on Friday, 16 November 2018 13:48:54 UTC