Re: [whatwg/fetch] More CORB-protected MIME types - adding protected types one-by-one. (#860)

@annevk, can you please provide feedback whether we might want to move forward with making spec changes here? (https://github.com/whatwg/fetch/issues/860#issuecomment-456083716 seemed supportive if we treat error handling as an orthogonal discussion.)  We could wait until we have tried experimenting with ORB / safelist-based approach, but maybe adding extra MIME types to the spec makes sense?

How would the spec changes look like?:

- Maybe we can just spell out additional types in https://fetch.spec.whatwg.org/#corb-protected-mime-type
- Alternatively, we could tweak https://mimesniff.spec.whatwg.org/ to add a definition of non-embeddable-in-html-types (suggestions for a better name welcomed) and refer to that from https://fetch.spec.whatwg.org/#corb-protected-mime-type.

FWIW, WPT tests (at `fetch/corb/script-resource-with-nonsniffable-types.tentative.sub.html`) cover the following types that are recognized by CORB in Chromium:
- `application/gzip`
- `application/pdf`
- `application/x-gzip`
- `application/x-protobuf` (with plans to also cover `application/x-protobuffer`)
- `application/zip`
- `multipart/byteranges`
- `multipart/signed`
- `text/csv`
- `text/event-stream`

Additionally, CORB in Chromium recognizes:
- `application/msexcel`
- `application/mspowerpoint`
- `application/msword`
- `application/msword-template`
- `application/pdf`
- `application/vnd.ces-quickpoint`
- `application/vnd.ces-quicksheet`
- `application/vnd.ces-quickword`
- `application/vnd.ms-excel`
- `application/vnd.ms-excel.sheet.macroenabled.12`
- `application/vnd.ms-powerpoint`
- `application/vnd.ms-powerpoint.presentation.macroenabled.12`
- `application/vnd.ms-word`
- `application/vnd.ms-word.document.12`
- `application/vnd.ms-word.document.macroenabled.12`
- `application/vnd.msword`
- `application/vnd.openxmlformats-officedocument.presentationml.presentation`
- `application/vnd.openxmlformats-officedocument.presentationml.template`
- `application/vnd.openxmlformats-officedocument.spreadsheetml.sheet`
- `application/vnd.openxmlformats-officedocument.spreadsheetml.template`
- `application/vnd.openxmlformats-officedocument.wordprocessingml.document`
- `application/vnd.openxmlformats-officedocument.wordprocessingml.template`
- `application/vnd.presentation-openxml`
- `application/vnd.presentation-openxmlm`
- `application/vnd.spreadsheet-openxml`
- `application/vnd.wordprocessing-openxml`

I am not sure if we'd want to include all of these types in the spec - we'd probably need to agree on the set of types to include, before proceeding with any spec changes.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/860#issuecomment-738343746