Re: [whatwg/fetch] Add `Last-Event-ID` to CORS-safelisted request headers (PR #1788)

annevk left a comment (whatwg/fetch#1788)

Oh that does make this harder. Hmm. What Gecko does is a hack that I wish were not possible as it could allow for all kinds of shenanigans we don't really want to allow.

We'd either have to set the `Cache-Control` header at a later stage (though that would likely impact service workers as well) or specifically safelist that header name and value combination as well.

@ricea @smaug---- thoughts?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1788#issuecomment-2749014782
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1788/c2749014782@github.com>