Re: [whatwg/fetch] Let Origin header honor referrer policy for non CORS request (#908) from Anne van Kesteren on 2019-05-29 (public-webapps-github@w3.org from May 2019)

From: Anne van Kesteren <notifications@github.com>
Date: Wed, 29 May 2019 05:31:49 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/908/c496916322@github.com>

I think we should only take this into account when setting the `Origin` header, otherwise it will also affect various CORS algorithms and that does not seem like the right thing to do.

Also, for some cross-origin navigation requests the `Origin` header was always `null` per the tests, right? That also needs to be reflected somehow.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/908#issuecomment-496916322

Received on Wednesday, 29 May 2019 12:32:11 UTC