Re: [whatwg/fetch] Add TAO check (#955)

npm1 commented on this pull request.



> @@ -1548,10 +1548,15 @@ Unless stated otherwise, it is unset.
 <p>A <a for=/>request</a> has an associated <dfn export for=request id=done-flag>done flag</dfn>.
 Unless stated otherwise, it is unset.
 
+<p>A <a for=/>request</a> has an associated
+<dfn export for=request id=timing-allow-failed-flag>timing allow failed flag</dfn>. Unless stated
+otherwise, it is unset.

If an intermediate response fails the timing allow origin check, and then more redirects happen, the later responses also need to fail the check. Thus it makes more sense to me to add it to the request, since this is a per-request answer. If need be I can add it to response, but would it be possible to look at the previous response's flag during a redirect?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/955#discussion_r340671775