On Thursday, February 19, 2015 at 11:26:25 AM UTC-8, Benjamin Kelly wrote: > On Wed, Feb 18, 2015 at 4:29 PM, Boris Zbarsky wrote: > > > > >> 1) ESR - FF 38 is an ESR release and shipping a new API with some parts > >> not yet supported may not be the best thing to do. What is the usual policy > >> in such a situation? > >> > > > > How happy are you backporting security fixes for this code that pop up > > over the next year or so to 38? > > > > It seems to me that backporting to dom/fetch should be relatively > straightforward. Its pretty isolated code. > > If something needs to be backported for the necko side of the house, then > it probably needs to be fixed in the ESR for XHR and other things anyway. > Whether we ship fetch or not will probably not effect this. > > Nikhil, what do you think? > > Ben
We do have a CSP type for fetch. Brian, does that automatically handle mixed content? Ben, are you ok with the clone() that just landed being enabled? If so, I'll flip the pref. _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
