Re: [whatwg/fetch] "Set internalResponse’s CSP list" never sets it on the non-internal response? (#1002)

The idea is that fields that are not filtered remain the same. That probably ought to be clarified. It's also not entirely clear to me anymore why we store CSP list on responses though. Is there ever a response without a `Content-Security-Policy` header that still ends up with a CSP list?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1002#issuecomment-589937858