Intent to Implement and Ship: Allow simple Range header values without preflight

107 views
Skip to first unread message

Rayan Kanso

unread,
Oct 5, 2021, 6:50:40 AM10/5/21
to blink-dev

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/
Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.


Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks


Interoperability and Compatibility


Gecko: Positive

WebKit: No signal

Web developers: No signal


Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97


Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816

Mike Taylor

unread,
Oct 6, 2021, 4:22:54 PM10/6/21
to Rayan Kanso, blink-dev
On 10/5/21 6:50 AM, Rayan Kanso wrote:

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/
Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.


Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks


Interoperability and Compatibility


Gecko: Positive

WebKit: No signal

Can we ask WebKit folks for a signal?


Web developers: No signal


Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97


Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816
--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAe2mZ1N0Oqz%3DVgEm%2BFQdJBVJCQbG%3Dv-6aO_JqRzm-9uBeQ%3Dfg%40mail.gmail.com.


Yoav Weiss

unread,
Oct 7, 2021, 3:24:27 AM10/7/21
to Mike Taylor, Rayan Kanso, blink-dev
On Wed, Oct 6, 2021 at 10:22 PM Mike Taylor <mike...@chromium.org> wrote:
On 10/5/21 6:50 AM, Rayan Kanso wrote:

Contact emails

raya...@chromium.org, jakear...@chromium.org

Specification

https://fetch.spec.whatwg.org/
Diff: https://github.com/whatwg/fetch/pull/1312

Summary

Allows requests with simple range headers to go through without preflight. CORS requests will be able to use the Range header in limited ways (having only one valid range) without triggering a preflight.


Blink component

Blink>SecurityFeature>CORS

TAG review

Not applicable - this is a simple amendment that does not require an architectural review.

Risks


Interoperability and Compatibility


Gecko: Positive

Also, this doesn't count as a positive Mozilla position. I agree it's a good signal, and am not sure we need to file for an official position though. 


WebKit: No signal

Can we ask WebKit folks for a signal?


Web developers: No signal


Debuggability

N/A

Is this feature fully tested by web-platform-tests?

https://github.com/web-platform-tests/wpt/pull/31058

Flag name

N/A

Requires code in //chrome?

False

Launch bug

https://bugs.chromium.org/p/chromium/issues/detail?id=1255711

Estimated milestones

M96/M97


Link to entry on the Chrome Platform Status

https://chromestatus.com/feature/5652396366626816
--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAAe2mZ1N0Oqz%3DVgEm%2BFQdJBVJCQbG%3Dv-6aO_JqRzm-9uBeQ%3Dfg%40mail.gmail.com.


--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.

Rayan Kanso

unread,
Oct 7, 2021, 5:58:04 AM10/7/21
to Yoav Weiss, Mike Taylor, blink-dev
Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

Yoav Weiss

unread,
Oct 7, 2021, 8:12:54 AM10/7/21
to Rayan Kanso, Mike Taylor, blink-dev
On Thu, Oct 7, 2021 at 11:58 AM Rayan Kanso <raya...@chromium.org> wrote:
Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

Mike West

unread,
Oct 7, 2021, 3:31:00 PM10/7/21
to Yoav Weiss, Rayan Kanso, Mike Taylor, blink-dev
LGTM1.

This seems correct to me from a behavior perspective, and I'm comfortable considering this to be small enough to avoid explicit signal requirements, and to accept the fact that it's landed in the spec as being Good Enough.

-mike


To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAL5BFfXjEvYT0OP%3Df1U0sZ7cAcrKx9LYWyVS3GEUv4rnqRx3dw%40mail.gmail.com.

Yoav Weiss

unread,
Oct 7, 2021, 3:33:58 PM10/7/21
to blink-dev, Mike West, Rayan Kanso, Mike Taylor, blink-dev, Yoav Weiss
LGTM2

On Thursday, October 7, 2021 at 9:31:00 PM UTC+2 Mike West wrote:
LGTM1.

This seems correct to me from a behavior perspective, and I'm comfortable considering this to be small enough to avoid explicit signal requirements, and to accept the fact that it's landed in the spec as being Good Enough.

-mike


On Thu, Oct 7, 2021 at 2:12 PM Yoav Weiss <yoav...@chromium.org> wrote:
On Thu, Oct 7, 2021 at 11:58 AM Rayan Kanso <raya...@chromium.org> wrote:
Can we ask WebKit folks for a signal?

There's this bug filed against WebKit. I'm not aware of any other channels to get feedback.

 
On Thu, Oct 7, 2021 at 8:24 AM Yoav Weiss <yoav...@chromium.org> wrote:
On Wed, Oct 6, 2021 at 10:22 PM Mike Taylor <mike...@chromium.org> wrote:
On 10/5/21 6:50 AM, Rayan Kanso wrote:
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

--
You received this message because you are subscribed to the Google Groups "blink-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+unsubscribe@chromium.org.

Daniel Bratell

unread,
Oct 7, 2021, 3:38:23 PM10/7/21
to Yoav Weiss, blink-dev, Mike West, Rayan Kanso, Mike Taylor

LGTM3

/Daniel

To unsubscribe from this group and stop receiving emails from it, send an email to blink-dev+...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/blink-dev/0bf72a14-7ff5-4898-98d1-4b9fdd19ab53n%40chromium.org.
Reply all
Reply to author
Forward
0 new messages