Re: [whatwg/fetch] Cache-Friendly Access-Control-Allow-Origin (#890)

Yeah, I'd prefer syntax that avoids new parsing and model requirements. I have these extensions in mind, but they require some implementer interest (which I think we have) and people to do the work (of writing the text and tests):

* `same-site` token. If A requests B, it's a match if B's host is [same site](https://url.spec.whatwg.org/#host-same-site) with A's host and B's scheme is A's scheme.
* registrable domain in addition to origin (e.g., `example.com`). If A requests B, it's a match if A's host's registrable domain is `example.com`.
* Multiple values, we'd now split the header value on commas and compare each value when trying to determine a match.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/890#issuecomment-512778646