Re: [whatwg/fetch] Proposal: Allow servers to take full responsibility for cross-origin access protection (#878)

> It still sounds like a summary of the OP is "CORS behaviour shouldn't have changed".

That's not what I wrote at all; please don't misrepresent my use cases.

CORS can be changed in a thousand ways. I just don't want servers that explicitly do _not_ want _any_ CORS whatsoever in whatever shape of form, to not be affected by any such changes. Servers who do not _explicitly_ opt out of CORS, or who only granularly opt out using the existing mechanisms, will be affected by all the changes.

So if anything, I'm advocating for a "do not bother me with CORS behavior" switch, precisely because CORS will keep on changing. Very different from "CORS behaviour shouldn't have changed".

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/878#issuecomment-471033621