- From: Patrick Meenan <notifications@github.com>
- Date: Thu, 30 Apr 2026 06:27:55 -0700
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Thursday, 30 April 2026 13:27:59 UTC
@pmeenan commented on this pull request. > + <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a> + `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s + <a for=response>header list</a>. + + <li><p>If <var>request</var>'s <a for=request>response tainting</a> is "<code>opaque</code>" and + <var>corpPolicy</var> is not `<code>cross-origin</code>`, then return <var>response</var>. I removed all of the no-cors stuff and went back to the as-implemented `non-opaque` requirement. -- Reply to this email directly or view it on GitHub: https://github.com/whatwg/fetch/pull/1854#discussion_r3168250183 You are receiving this because you are subscribed to this thread. Message ID: <whatwg/fetch/pull/1854/review/4205502456@github.com>
Received on Thursday, 30 April 2026 13:27:59 UTC