Search results

Add <code>Signature</code> to <code>CORS non-wildcard request-header name</code>

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

topic: http

Status: Open.

#1819 In whatwg/fetch;

· mnot opened on Apr 1, 2025

Specify how/if response status code &amp; content type are exposed for cross-origin navigations

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: timingIssues and PR that touch on the infrastructure that is used by ResourceTiming, NavigationTiming, etcIssues and PR that touch on the infrastructure that is used by ResourceTiming, NavigationTiming, etc

Status: Open.

#1602 In whatwg/fetch;

· noamr opened on Feb 7, 2023

Make service worker timing for subresources specified and interoperable

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: timingIssues and PR that touch on the infrastructure that is used by ResourceTiming, NavigationTiming, etcIssues and PR that touch on the infrastructure that is used by ResourceTiming, NavigationTiming, etc

Status: Open.

#1597 In whatwg/fetch;

· noamr opened on Jan 25, 2023

Define opaque-response blocking

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: orb

topic: same-origin policy

Status: Draft (not ready).

whatwg/fetchnumber 1442

#1442 In whatwg/fetch;

· annevk opened on May 17, 2022

Define HSTS as "internal" redirect

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: redirects

Status: Open.

#1426 In whatwg/fetch;

· annevk opened on Apr 19, 2022

should VARY be a cors-safelisted header?

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

Status: Open.

#1365 In whatwg/fetch;

· wanderview opened on Dec 2, 2021

Refactoring WebSocket connections

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: connections

topic: websockets

Status: Open.

#1243 In whatwg/fetch;

· annevk opened on May 26, 2021

Prohibit file: URL access from non-file: URLs

security/privacyThere are security or privacy implicationsThere are security or privacy implications

Status: Open.

#1195 In whatwg/fetch;

· domenic opened on Mar 15, 2021

Remove Cache-Control and Expires headers from the CORS-safelisted response headers to prevent user tracking

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

Status: Open.

#1128 In whatwg/fetch;

· plaperdr opened on Dec 16, 2020

Using "no-cors" to distinguish between a network error and a request blocked by CORS

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: cors

topic: orb

Status: Open.

#1123 In whatwg/fetch;

· alexkar598 opened on Dec 8, 2020

Tracking bug: Trust Token API / Fetch integration

addition/proposalNew features or enhancementsNew features or enhancements

needs implementer interestMoving the issue forward requires implementers to express interestMoving the issue forward requires implementers to express interest

security/privacyThere are security or privacy implicationsThere are security or privacy implications

Status: Open.

#1047 In whatwg/fetch;

· davidvancleve opened on Jun 30, 2020

Should network state be keyed beyond the top-level site

security-trackerGroup bringing to attention of security, or tracked by the security Group but not needing response.Group bringing to attention of security, or tracked by the security Group but not needing response.

security/privacyThere are security or privacy implicationsThere are security or privacy implications

topic: http

Status: Open.

#1035 In whatwg/fetch;

· annevk opened on Jun 9, 2020