Re: [whatwg/fetch] New connections and port blocking (#889)

I was looking at the algorithm in Fetch and it seemed that if "obtain a connection" did the check nothing would really change in terms of observable behavior.

Although it depends a bit on whether we'd still do CSP checks if we decided the port was blocked. As written though you could be forgiven for thinking both would run.

A notable exception here is WebSocket connections, which is why I tried to tackle that.

But I would also be okay with having the check in both places. The failure would surface the same way as a DNS failure.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/889#issuecomment-850153445