Re: [whatwg/fetch] consider adding note that CORS preflight check excludes headers added by the browser or extensions (#1005)

@wanderview Would it make sense framing that the restrictions apply to requests that can be controlled by Web content, whether directly and indirectly, and these restrictions do not necessarily apply to requests initiated or modified by a user agent outside of the control of the web content?

That is, rather than trying to capture what's not in scope, you instead anchor on capturing what is in scope, and leaving the rest in the nether and implementation-defined (which seems to be your goal)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1005#issuecomment-596590097

Received on Monday, 9 March 2020 15:11:08 UTC