Re: [whatwg/fetch] Add `cross-origin` to allowed CORP header values. (#1016)

My reasoning was that this is a cross-origin policy and therefore:

* same-origin: no other origins
* same-site: same-site origins
* cross-origin: all origins, whereas with cross-site you might think it would exclude same-site-but-not-same-origin origins

At some point we might want to spell this out if this continues to come up. And yeah, all tests and implementations use `cross-origin` at the moment (and I PR'd corpp for this at some point in the past).

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1016#issuecomment-607286040