- From: Ben Kelly <notifications@github.com>
- Date: Mon, 09 Dec 2019 11:50:53 -0800
- To: w3c/ServiceWorker <ServiceWorker@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 9 December 2019 19:50:56 UTC
I'm fairly confident both chrome/firefox store and retrieve the full internal headers for opaque responses. In addition, both browsers do some amount of eager reading of the body data under different circumstances. It would be possible to fix all that for COEP, but its much safer to never allow these Response objects to enter the child/renderer process at all. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/w3c/ServiceWorker/issues/1490#issuecomment-563405512
Received on Monday, 9 December 2019 19:50:56 UTC