Make Shared-Storage-Write a forbidden response header

WICG / shared-storage

Explainer for proposed web platform Shared Storage API

Other

89 stars 23 forks source link

Make Shared-Storage-Write a forbidden response header #128

Closed pythagoraskitty closed 9 months ago

pythagoraskitty commented 9 months ago

We update spec.bs to include in the Fetch monkey patch that the new 'Shared-Storage-Write' header should be added to the list of forbidden response headers.

This will ensure that the 'Shared-Storage-Write' response header can only be set by the server and read by the user agent. Frontend JavaScript will not be able to read, write, or modify it.

Preview | Diff

pythagoraskitty commented 9 months ago

Decided to not do this.