Re: [whatwg/fetch] Block subresource requests whose URLs include credentials. (#465) from Dragana Damjanovic on 2021-05-10 (public-webapps-github@w3.org from May 2021)

From: Dragana Damjanovic <notifications@github.com>
Date: Mon, 10 May 2021 06:04:27 -0700
To: whatwg/fetch <fetch@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <whatwg/fetch/pull/465/c836673450@github.com>

@mikewest Can you also share with us what the Chrome behavior in case of <video>, <style>, etc. subresource with URL that do no have included credentials? I have seen in a comment(in bugzilla) that authentication promps are not blocked in Chrome for such subresources.  Have you try do block them in the past and if  yes why did you needed to roll it back?
Do you have any plans to try blocking such resources?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/465#issuecomment-836673450

Received on Monday, 10 May 2021 13:04:40 UTC