Re: [whatwg/fetch] Change combined values (#813)

I'm concerned about ignoring empty response header fields.  Something like:

Content-Length:
Content-Length: 10

Seems more like something that should be rejected than treated as the logical equivalent to "Content-Length: 10".  Seems like allowing it would potentially allow for more shenanigans around deliberately tricking (Or accidentally confusing) proxies and security software.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/813#issuecomment-429366466

Received on Friday, 12 October 2018 15:33:07 UTC