Re: [whatwg/fetch] CORS readability for no-cors requests (Issue #1839)

pmeenan left a comment (whatwg/fetch#1839)

To be fair, dictionaries don't literally need readability of the content, just that they make the content potentially vulnerable to side-channel attacks. Something that marked the response as not needing protection from exposure through attack would also be fine.

It could be something explicit in a new header or we could decide that `Access-Control-Allow-Origin: *` and/or `Cache-Control: public` are enough to signal that the content doesn't need to be protected.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1839#issuecomment-3523957584
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1839/3523957584@github.com>