- From: bvandersloot-mozilla <notifications@github.com>
- Date: Tue, 22 Nov 2022 07:00:29 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Tuesday, 22 November 2022 15:00:41 UTC
@bvandersloot-mozilla commented on this pull request.
> + <p class=warning> Using <a for=/>request</a> <a for=request>mode</a> "<code>unsafe-no-cors</code>"
+ is even more discouraged and unsafe than "<code>no-cors</code>". Any use of this mode must be in an
+ <a>agent cluster</a> associated with the <a>host environment</a> itself to isolate its results from
+ misuse. This <a for=request>mode</a> is deliberately not exposed in the {{RequestMode}}.
👍 moving it immediately below the `unsafe-no-cors` definition.
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1533#discussion_r1029440850
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/fetch/pull/1533/review/1190218869@github.com>
Received on Tuesday, 22 November 2022 15:00:41 UTC