In Whistler we discussed security concerns around service workers and a lot of them stem from the fact that we don't have a good interface in Gecko for Fetch[1]. Something that handles requests for all web platform features we have and deals with CSP, HSTS, Referrer Policy, redirects, service workers, CORS, Mixed Content, etc. for them.
While we decided not do this refactoring before shipping service workers, we should probably start planning, unless I'm missing something. [1] https://fetch.spec.whatwg.org/ -- https://annevankesteren.nl/ _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
