Re: [whatwg/fetch] Make Cors requests not take Referrer-Policy into account (#1013) from Anne van Kesteren on 2020-03-30 (public-webapps-github@w3.org from March 2020)

From: Anne van Kesteren <notifications@github.com>
Date: Mon, 30 Mar 2020 06:40:44 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/1013/c606005549@github.com>

We also need to update the note above which also talks about using response tainting.

Looking at cc80ec58d24668413b7a3c7160d9b4d83ace7b20 I wonder if we need to take both into account, as otherwise same origin requests will include the `Origin` header, which at least per the specification it has never done.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1013#issuecomment-606005549

Received on Monday, 30 March 2020 13:40:57 UTC