Intent to Implement and Ship: Allow simple Range header values without preflight

[Rayan Kanso]

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/

Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.

Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks

Interoperability and Compatibility

Gecko: Positive

WebKit: No signal

Web developers: No signal

Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97

Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816

[Mike Taylor]

On 10/5/21 6:50 AM, Rayan Kanso wrote:

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/

Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.

Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks

Interoperability and Compatibility

Gecko: Positive

WebKit: No signal

Can we ask WebKit folks for a signal?

Web developers: No signal

Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97

Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAe2mZ1N0Oqz%3DVgEm%2BFQdJBVJCQbG%3Dv-6aO_JqRzm-9uBeQ%3Dfg%40mail.gmail.com.

[Yoav Weiss]

On Wed, Oct 6, 2021 at 10:22 PM Mike Taylor <mike...@chromium.org> wrote:

On 10/5/21 6:50 AM, Rayan Kanso wrote:

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/

Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.

Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks

Interoperability and Compatibility

Gecko: Positive

Also, this doesn't count as a positive Mozilla position. I agree it's a good signal, and am not sure we need to file for an official position though. 

WebKit: No signal

Can we ask WebKit folks for a signal?

Web developers: No signal

Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97

Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAe2mZ1N0Oqz%3DVgEm%2BFQdJBVJCQbG%3Dv-6aO_JqRzm-9uBeQ%3Dfg%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/83e97b2b-cad3-07fc-747e-24a786b89ccd%40chromium.org.

[Rayan Kanso]

Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

[Yoav Weiss]

On Thu, Oct 7, 2021 at 11:58 AM Rayan Kanso <raya...@chromium.org> wrote:

Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

https://bit.ly/blink-signals

[Mike West]

LGTM1.

This seems correct to me from a behavior perspective, and I'm comfortable considering this to be small enough to avoid explicit signal requirements, and to accept the fact that it's landed in the spec as being Good Enough.

-mike

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAL5BFfXjEvYT0OP%3Df1U0sZ7cAcrKx9LYWyVS3GEUv4rnqRx3dw%40mail.gmail.com.

[Yoav Weiss]

LGTM2

On Thursday, October 7, 2021 at 9:31:00 PM UTC+2 Mike West wrote:

LGTM1.

This seems correct to me from a behavior perspective, and I'm comfortable considering this to be small enough to avoid explicit signal requirements, and to accept the fact that it's landed in the spec as being Good Enough.

-mike

On Thu, Oct 7, 2021 at 2:12 PM Yoav Weiss <yoav...@chromium.org> wrote:

On Thu, Oct 7, 2021 at 11:58 AM Rayan Kanso <raya...@chromium.org> wrote:

Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

https://bit.ly/blink-signals

 

On Thu, Oct 7, 2021 at 8:24 AM Yoav Weiss <yoav...@chromium.org> wrote:

On Wed, Oct 6, 2021 at 10:22 PM Mike Taylor <mike...@chromium.org> wrote:

On 10/5/21 6:50 AM, Rayan Kanso wrote:

Contact emails

raya...@chromium.org, jakearchi...@chromium.org

To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAe2mZ1N0Oqz%3DVgEm%2BFQdJBVJCQbG%3Dv-6aO_JqRzm-9uBeQ%3Dfg%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/83e97b2b-cad3-07fc-747e-24a786b89ccd%40chromium.org.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.

To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

[Daniel Bratell]

LGTM3

/Daniel

To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/0bf72a14-7ff5-4898-98d1-4b9fdd19ab53n%40chromium.org.