Re: [w3c/ServiceWorker] cache.match() and COEP (#1490)

Ok, ignore the comment about CORS responses then.  Sorry for my confusion.

It still feels more clear to me to reject the match() call instead of returning an opaque response that may blow up when passed to respondWith() further along.  And may leak headers via spectre.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1490#issuecomment-563323521

Received on Monday, 9 December 2019 16:38:34 UTC