Re: [w3c/ServiceWorker] `CacheStorage` & `COEP:credentialless` (#1592)

>> Since the CORP check is not only run for CacheStorage, but also for normal fetch request, the current proposition would break normal fetch request.

> I'm struggling to follow this a bit. I thought it was a good thing that the check included normal fetch requests. Can you walk me through a case where this breaks?

For the network fetch nothing should be blocked because we omit the credentials. On the other hand, for responses coming from the service worker we need a similar check, so it may make sense to have the logic in the CORP check to not have duplicated logic.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/1592#issuecomment-854605855