Re: [w3c/ServiceWorker] "no-cors" CSS SOP violation (#719)

monica-ch left a comment (w3c/ServiceWorker#719)

Discussed in [TPAC 2025](https://docs.google.com/document/d/1fOjXiGUFf_krkfYaWf5drbqzY7CTxn7EcDYr5ZWjzFg/edit?tab=t.0)

Safari already hides no-cors CSS subresource fetches from service workers, and it would be helpful for the Fetch spec to explicitly allow this with a permissive “may,” so engines can adopt similar behavior if needed. Longer-term, CSS’s CORS support gives authors a path to opt in when they want these requests visible to service workers. 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/w3c/ServiceWorker/issues/719#issuecomment-3549425947
You are receiving this because you are subscribed to this thread.

Message ID: <w3c/ServiceWorker/issues/719/3549425947@github.com>

Received on Tuesday, 18 November 2025 20:17:08 UTC