[whatwg/fetch] "Set internalResponse’s CSP list" never sets it on the non-internal response? (#1002)

https://fetch.spec.whatwg.org/commit-snapshots/d5c3d8b5570074e05c86a552e8a738daa19976cd/#main-fetch


> Set internalResponse’s CSP list\. \[CSP\]

As far as I can tell, this means that when HTML calls "initialize a Document's CSP list" ([here](https://html.spec.whatwg.org/#initialise-the-document-object)) the given response's CSP list is always empty, so CSP never applies.

Probably I'm missing something?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1002