Allow range requests to pass through a service worker |
|
Issue descriptionSpec change: https://github.com/whatwg/fetch/pull/560. Tests: https://github.com/web-platform-tests/wpt/pull/10348. Security issues to pay attention to: https://github.com/whatwg/fetch/issues/144#issuecomment-368040980 This spec change means that rage requests (such as those from media elements) are allowed to pass through a service worker as long as they aren't modified. This fixes a long standing issue where media elements behave oddly if intercepted by a service worker (as the range headers were lost). How media elements ingest partial responses remains unspecified for now. See the attacks in https://github.com/whatwg/fetch/issues/144#issuecomment-368040980 & their mitigations. Attack 4 is already covered in the tests.
,
Jun 13 2018
Yeah, some of these tests aren't related to service worker, so it was difficult to find a good home for them. Happy to move them though if somewhere else is a better fit.
,
Jun 13 2018
Haven't looked closely but I expect wpt/fetch is fine. I was just saying our team should include this as part of issue 678905 even though the title there just says wpt/service-workers. |
|
►
Sign in to add a comment |
|
Comment 1 by falken@chromium.org
, Jun 8 2018Status: Available (was: Untriaged)