Re: [whatwg/fetch] consider adding note that CORS preflight check excludes headers added by the browser or extensions (#1005)

To me, though, extensions are just one aspect here.  Browsers can add other headers for different reasons, like enterprise policies, etc.  What I really want to say is something like:

"Note:  Browsers may internally add headers for various reasons such as enterprise policies, extensions, etc.  Current implementations typically do not include these internally added headers when determining if a CORS preflight is required.  The CORS preflight check typically only looks at headers added by content script."

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1005#issuecomment-596588204