- From: Anne van Kesteren <notifications@github.com>
- Date: Fri, 27 Sep 2019 04:56:31 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Friday, 27 September 2019 11:56:53 UTC
https://w3c.github.io/webappsec-mixed-content/level2.html does help and would thwart the attack described on the WebKit blog. Attackers could still play with navigations, but that's much more visible. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/issues/920#issuecomment-535908860
Received on Friday, 27 September 2019 11:56:53 UTC