Re: [whatwg/fetch] Disallowing `Authorization` in CORS-preflight wildcards is currently not web compatible (Issue #1919)

valenting left a comment (whatwg/fetch#1919)

Firefox is happy to make this change (it's only a pref flip for us), but since this is likely to cause web-compat breakage, we can only roll this out in step with the other major browser. CC @mikewest @ricea 

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1919#issuecomment-5476100268
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/1919/5476100268@github.com>

Received on Monday, 31 August 2026 08:59:20 UTC