Skip to content

fix(ext/fetch): no auth on cross origin redirect#16745

Closed
lucacasonato wants to merge 7 commits intodenoland:mainfrom
lucacasonato:fetch_no_auth_cross_origin_redirect
Closed

fix(ext/fetch): no auth on cross origin redirect#16745
lucacasonato wants to merge 7 commits intodenoland:mainfrom
lucacasonato:fetch_no_auth_cross_origin_redirect

Conversation

@lucacasonato
Copy link
Copy Markdown
Contributor

Spec change: whatwg/fetch#1544

Still waiting for WPTs and upstream spec merge.

Copy link
Copy Markdown
Contributor

@aapoalas aapoalas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me and the spec change has been merged. I guess this would be good to go?

@bnoordhuis
Copy link
Copy Markdown
Contributor

FWIW, Node.js made this change recently. It did lead to some fallout among the user base but that's the price of security.

@aapoalas aapoalas marked this pull request as ready for review July 7, 2023 19:10
@bartlomieju bartlomieju added this to the 1.37 milestone Aug 27, 2023
@dsherret
Copy link
Copy Markdown
Contributor

@lucacasonato should I move this one to the 1.38 milestone or do you think it can be merged by tomorrow?

@dsherret dsherret modified the milestones: 1.37, 1.38 Sep 19, 2023
@bartlomieju bartlomieju removed this from the 1.38 milestone Dec 4, 2023
@ry
Copy link
Copy Markdown
Member

ry commented Mar 21, 2025

closing this because it's old

@ry ry closed this Mar 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants