- From: Anne van Kesteren <notifications@github.com>
- Date: Fri, 16 Nov 2018 05:48:32 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 16 November 2018 13:48:54 UTC
This also addresses #737 in that now A -> B -> A would be considered cross-origin even for "no-cors", but leaving that open for further plumbing in HTML et al to override that in select cases (e.g., <img>). Fixes #756. You can view, comment on, or merge this pull request online at: https://github.com/whatwg/fetch/pull/834 -- Commit Summary -- * Take tainted origin flag into account for the same origin check -- File Changes -- M fetch.bs (4) -- Patch Links -- https://github.com/whatwg/fetch/pull/834.patch https://github.com/whatwg/fetch/pull/834.diff -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/pull/834
Received on Friday, 16 November 2018 13:48:54 UTC