Re: [whatwg/fetch] More CORB-protected MIME types - safelist-based approach (#721)

So, is your proposal to add some state to CORB, so that range requests are handled like this:
- If CORB sees a 206 response then
     - If this is a same-origin response, then return allowed
     - If this is a cross-origin response, then check if 1) non-range response was received for the identical URL in the past and 2) whether the past response sniffed as one of safelist content types (e.g. as media / js / css).

Did I get that right?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/721#issuecomment-469701037