Re: [whatwg/fetch] Process subresource link headers (PR #1409)

> I see, I raised this before in [w3c/preload#148](https://github.com/w3c/preload/issues/148) but that got closed by [whatwg/html#7622](https://github.com/whatwg/html/pull/7622) which doesn't quite address this. (E.g., I think as defined a `Link` header on a style sheet creates different kind of fetches (with respect to `Referer` for instance) than subresources the style sheet might link.)
> 
> I'm rather concerned about a subresource fetch resulting in further fetches. That's simply not a side effect you'd expect when pulling a resource from elsewhere. @yoavweiss do you know where this feature got discussed before including the security implications, how this should relate to CSP, Referer headers, etc?

I would expect a stylesheet I fetch to import other stylesheets and continue to do so recursively, same with scripts... I don't see what makes link headers different in that regard.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1409#issuecomment-1065081448
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1409/c1065081448@github.com>