Re: [whatwg/fetch] Allow Origin and Access-Control-Allow-Origin to have multiple values (Issue #1790)

I don't understand how this setup works with third-party cookie deprecation.

Provided it somehow works, we can't change how `Origin` works without opt-in. The original RFC has long been considered obsolete. (There's a desire to allow multiple values for `Access-Control-Allow-Origin`, but that would mainly be as a cache benefit and would not help with this case. I think if we decided to pursue this case we'd use a space-separated value, not comma-separated.)

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1790#issuecomment-2522654143
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1790/2522654143@github.com>

Received on Friday, 6 December 2024 09:38:56 UTC