Re: [w3c/ServiceWorker] can service worker scope include `username:password@` URL credentials? (#1520)

It seems firefox is following the spec here as far as I can tell, but maybe there is something that allows chrome and safari to remove URL credentials before the navigation?

An alternative could be to null out the username and password of a URL when registering a scope.  It seems a bit like a footgun that we allow these scopes to be created, but they won't match any navigations in 2 out of 3 browsers.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1520#issuecomment-652620485

Received on Wednesday, 1 July 2020 20:05:52 UTC