Re: [whatwg/fetch] consider adding note that CORS preflight check excludes headers added by the browser or extensions (#1005)

Not even in a non-normative note?  Maybe just saying that browsers can choose to allow extensions to add headers that bypass this check?

The reality currently is that browsers do make this exemption for both extensions and browser added headers, but there is no indication in the spec at all.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1005#issuecomment-595851383

Received on Friday, 6 March 2020 16:35:28 UTC