Re: [w3c/ServiceWorker] Service-Worker-Allowed can be cross-origin to the script URL. (#1307)

I think you should make this change as it's indicative of something going wrong that developers should get to know early on. (I can't quite find an attack angle, but that shouldn't be the bar.)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1307#issuecomment-495508898

Received on Friday, 24 May 2019 07:48:29 UTC