Re: [w3c/webcomponents] HTML, CSS, and JSON modules shouldn't solely rely on MIME type to change parsing behavior (#839)

> This is problematic because an import statement that intended to load CSS or JSON and not execute arbitrary scripts could end up executing scripts if the destination server's MIME type got changed or the destination server get compromised.

I believe this functionality is required in **polyfilling**, to support browsers not yet supports HTML/JSON/CSS modules, a server can just responding the corresponding JavaScript file that wrapping original content to default export, which could provide a consistent code style at consumer-side.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/webcomponents/issues/839#issuecomment-532635845

Received on Wednesday, 18 September 2019 11:06:43 UTC