Skip to content

Define opaque-response blocking (updated) #1755

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open

Define opaque-response blocking (updated) #1755

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
aa2980f
Define opaque-response blocking
annevk Oct 27, 2022
cbe9f32
Add the `validate a partial response` algorithm and the `extract cont…
sefeng211 May 27, 2024
5818ed4
Update the ORB spec to align with Firefox's implementation
sefeng211 May 27, 2024
0908c4b
Fix the warnings
sefeng211 Jun 12, 2024
00ef4cf
Try to use dfn-type=http-header to fix the build error
sefeng211 Aug 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Try to use dfn-type=http-header to fix the build error
  • Loading branch information
@sefeng211
sefeng211 committed Aug 8, 2024
commit 00ef4cf812e2fec947e799f54e6eae29a0a13484
2 changes: 1 addition & 1 deletion fetch.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3305,7 +3305,7 @@ through TLS using ALPN. The protocol cannot be spoofed through HTTP requests in
set of bytes, and ultimately falls back to a full parse due to unfortunate (lack of) design
decisions in the early days of the web platform. As a result there are still quite a few responses
whose secrets can end up being revealed to attackers. Web developers are strongly encouraged to use
the `<code http-header>Cross-Origin-Resource-Policy</code>` response header to defend them.
the `<code dfn-type=http-header>Cross-Origin-Resource-Policy</code>` response header to defend them.
</div>


Expand Down
Loading