- From: Junior <notifications@github.com>
- Date: Mon, 03 Jun 2019 15:33:17 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Monday, 3 June 2019 22:33:39 UTC
> * What is the rationale? > Please see https://bugzilla.mozilla.org/show_bug.cgi?id=1504085#c7 At the beginning, we don't want to leak `Origin:` for HTTPS->HTTP cases. And we find out `Referrer-Policy` is a good target to honor. > * Why is this only for non CORS requests? Please see https://github.com/web-platform-tests/wpt/pull/15937#discussion_r270465836 Tag @annevk who might have some ideas. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/pull/908#issuecomment-498450982
Received on Monday, 3 June 2019 22:33:39 UTC