Re: [whatwg/fetch] "Set internalResponse’s CSP list" never sets it on the non-internal response? (#1002) from Anne van Kesteren on 2020-02-24 (public-webapps-github@w3.org from February 2020)

From: Anne van Kesteren <notifications@github.com>
Date: Mon, 24 Feb 2020 08:17:14 -0800
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/issues/1002/590411685@github.com>

Ah, it does make some sense for the response to carry a pointer to the origin policy in effect for it. But that doesn't really require the other things to be available as parsed entities on the response. All that could still be live in the respective policy specification. It would also have to cover how it interacts with Origin Policy, but that seems needed anyway?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1002#issuecomment-590411685

Received on Monday, 24 February 2020 16:17:26 UTC