#31823: Add Support for Fetch Metadata Request Headers
-------------------------------------+-------------------------------------
     Reporter:  meggles711           |                    Owner:
                                     |  meggles711
         Type:  New feature          |                   Status:  assigned
    Component:  CSRF                 |                  Version:  master
     Severity:  Normal               |               Resolution:
     Keywords:  CSRF, Fetch,         |             Triage Stage:
  headers                            |  Someday/Maybe
    Has patch:  0                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------
Changes (by felixxm):

 * stage:  Unreviewed => Someday/Maybe


Comment:

 Fetch metadata request headers are still on an [https://w3c.github.io
 /webappsec-fetch-metadata/#sec-fetch-site-header early and experimental
 stage] and may change at any moment. Moreover browsers don't support them
 (e.g. Firefox and Safari). We can reconsider this ticket when the
 specification becomes more mature and stable.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/31823#comment:2>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/068.10b63e9e6ffa96fdae66b11a51b2f494%40djangoproject.com.

Reply via email to