Skip to content
This repository was archived by the owner on Nov 4, 2024. It is now read-only.

Add check for header Cross-Origin-Resource-Policy #360

Open
craigfrancis opened this issue Jul 3, 2018 · 0 comments
Open

Add check for header Cross-Origin-Resource-Policy #360

craigfrancis opened this issue Jul 3, 2018 · 0 comments

Comments

@craigfrancis
Copy link
Contributor

The Cross-Origin-Resource-Policy header is now supported in Safari Technology Preview 59 (and hopefully other browsers soon):

https://fetch.spec.whatwg.org/#cross-origin-resource-policy-header
whatwg/fetch#687
https://www.arturjanc.com/cross-origin-infoleaks.pdf
https://webkit.org/blog/8332/release-notes-for-safari-technology-preview-59/
https://developer.microsoft.com/en-us/microsoft-edge/platform/issues/17934554/

e.g.

Cross-Origin-Resource-Policy: same-origin
Cross-Origin-Resource-Policy: same-site
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants