[whatwg/fetch] Consider changing CORP to use same-site instead of schemelessly same-site (#969)

This would entail replacing https://fetch.spec.whatwg.org/#cross-origin-resource-policy-check step 5 with a simpler

```html
 <li><p>If <var>request</var>'s <a for=request>origin</a> is <a>same site</a> with
 <var>request</var>'s <a for=request>current URL</a>'s <a for=url>origin</a>, then return
 <b>allowed</b>.
```

Some background in https://github.com/whatwg/fetch/pull/965#issuecomment-552810232 and https://github.com/whatwg/fetch/issues/687#issuecomment-395551229.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/969