Re: [whatwg/fetch] Remove FTP support (#1009)

> Network scheme: maybe this can be removed in favor of "HTTP(S) scheme"? Or rename "HTTP(S) scheme" to "network scheme"? Unsure what this impacts.

"Network scheme" is [used](https://w3c.github.io/webappsec-csp/#match-url-to-source-expression) at least in CSP, so that e.g. `script-src *` allows loading scripts hosted on `http://example.com`, `https://example.com`, and `ftp://example.com`, but does not allow `<script src="data:text/javascript,alert(1)"></script>`.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1009#issuecomment-601406404