Re: [whatwg/fetch] Add `range` to CORS-safelisted request-headers (#1310)

I tripped over this just recently in attempting to use https://github.com/phiresky/sql.js-httpvfs, which makes use of range requests - I checked that the place I was `fetch`ing (github pages) supported cross-origin GETs (it returns `access-control-allow-origin: *` for a non-preflight request), but it turned out not to support cross-origin GETs with `range` (because it doesn't respond to preflight requests at all, afaict).

It seems silly that I could request the _entire_ resource but not a portion of it.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1310#issuecomment-928225067

Received on Monday, 27 September 2021 20:02:38 UTC