https://www.w3.org/Bugs/Public/show_bug.cgi?id=24905

            Bug ID: 24905
           Summary: [imports]: Fetches for imports should be anonymous
                    only for cross origin requests
           Product: WebAppsWG
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Component Model
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
                CC: [email protected], [email protected]
            Blocks: 20683

Currently the fetch is always done in "anonymous" mode, 
but it could send credentials for same domain imports.

Also, the spec is confusingly uses fetch algorithm with legacy HTML parameters.
It could be simplified using the fetch standard directly.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to