Skip to content

Commit 63e2f17

Browse files
authored
Fix COOP enforcement in redirects
Using the filtered response's header list in case of a redirect meant we wouldn't get access to the COOP header. #8740 tracks the more general issue here.
1 parent 703e127 commit 63e2f17

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

source

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2578,6 +2578,7 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
25782578
<li><dfn data-x="concept-response-timing-info" data-x-href="https://fetch.spec.whatwg.org/#concept-response-timing-info">timing info</dfn></li>
25792579
<li><dfn data-x="concept-response-service-worker-timing-info" data-x-href="https://fetch.spec.whatwg.org/#response-service-worker-timing-info">service worker timing info</dfn></li>
25802580
<li><dfn data-x="concept-response-has-cross-origin-redirects" data-x-href="https://fetch.spec.whatwg.org/#response-has-cross-origin-redirects">has-cross-origin-redirects</dfn></li>
2581+
<li><dfn data-x="concept-filtered-response-opaque-redirect" data-x-href="https://fetch.spec.whatwg.org/#concept-filtered-response-opaque-redirect">opaque-redirect filtered response</dfn></li>
25812582
<li>
25822583
<dfn data-x-href="https://wicg.github.io/background-fetch/#extract-content-range-values">extract content-range values</dfn>
25832584
<!-- TODO: move this to FETCH -->
@@ -81704,9 +81705,10 @@ dictionary <dfn dictionary>DragEventInit</dfn> : <span>MouseEventInit</span> {
8170481705
<li><p>If <var>reservedEnvironment</var> is a <span>non-secure context</span>, then return
8170581706
<var>policy</var>.</p></li>
8170681707

81707-
<li><p>Let <var>value</var> be the result of <span>getting a structured field value</span> given
81708-
`<code>Cross-Origin-Opener-Policy</code>` and "<code data-x="">item</code>" from
81709-
<var>response</var>'s <span data-x="concept-response-header-list">header list</span>.</p></li>
81708+
<li><p>Let <var>parsedItem</var> be the result of <span>getting a structured field value</span>
81709+
given `<code>Cross-Origin-Opener-Policy</code>` and "<code data-x="">item</code>" from
81710+
<var>response</var>'s <span>unsafe response</span>'s <span
81711+
data-x="concept-response-header-list">header list</span>.</p>
8171081712

8171181713
<li>
8171281714
<p>If <var>parsedItem</var> is not null, then:</p>
@@ -131643,6 +131645,7 @@ INSERT INTERFACES HERE
131643131645
Arne Thomassen,
131644131646
Aron Spohr,
131645131647
Arphen Lin,
131648+
Arthur Hemery,
131646131649
Arthur Sonzogni, <!-- ArthurSonzogni on GitHub -->
131647131650
Arthur Stolyar,
131648131651
Arun Patole,

0 commit comments

Comments
 (0)