Hi everybody,

I'd like a position on the Fetch Metadata[0] spec. It is a security
feature that provides extra context to fetch requests so that servers
can make informed decisions. It is currently implemented by both Firefox
and Chromium.

I have started a work-in-progress patch[1] on bug 204744 for this. It
currently implements Sec-Fetch-Dest, Sec-Fetch-Mode, and part of
Sec-Fetch-Site. However Sec-Fetch-User I believe will require more
significant changes that will have to be exposed to each port. It
requires knowing if a request was initiated by a user, exact details are
specified here[2], which I think will require integration at the
Safari/WebKitGTK/etc layers. So I'd appreciate input on if there is
interest in this.

Thanks,
Patrick

[0] https://www.w3.org/TR/fetch-metadata/
[1] https://bugs.webkit.org/show_bug.cgi?id=204744
[2] https://www.w3.org/TR/fetch-metadata/#directly-user-initiated
_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Reply via email to