Re: [whatwg/fetch] Safelist request headers starting with `Sec-` (#880)

Is that the intended behavior?

If it is, than I'd assume step 32.2 should skip the other substeps if `init["headers"]` doesn't exist (and then we're good as far as `Sec-` headers go)

If it isn't and we need to append all the headers anyway, maybe we can carve out `Sec-` or forbidden headers in general that come from the `Request` and not from `init`?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/880#issuecomment-475178006