17 Sep
2025
17 Sep
'25
6:59 p.m.
On Wed Sep 17 14:59:40 2025 +0000, Jacek Caban wrote:
This seems fragile. I think this is meant to check if URL is not relative? If yes, then what if it's relative but the document is not http? Is it even specific to XDR and doesn't apply to XHR? Could we just remove that check?
Yeah, it's supposed to only allow http URLs. I also skipped relative URLs since I wasn't sure how to handle them.
And yes it's specific to XDR, IIRC rationale given on some Microsoft blog was that it needs the response headers to see if it allows cross origin and that's http specific. (obviously this was before XHR supported cross-domain requests)
Note that if I remove it, one of the tests will have to be turned into todo.