[webkit-dev] Request for Position: Fetch Metadata

Patrick Griffis pgriffis at igalia.com
Fri Feb 11 14:15:38 PST 2022

Hi everybody,

I'd like a position on the Fetch Metadata[0] spec. It is a security
feature that provides extra context to fetch requests so that servers
can make informed decisions. It is currently implemented by both Firefox
and Chromium.

I have started a work-in-progress patch[1] on bug 204744 for this. It
currently implements Sec-Fetch-Dest, Sec-Fetch-Mode, and part of
Sec-Fetch-Site. However Sec-Fetch-User I believe will require more
significant changes that will have to be exposed to each port. It
requires knowing if a request was initiated by a user, exact details are
specified here[2], which I think will require integration at the
Safari/WebKitGTK/etc layers. So I'd appreciate input on if there is
interest in this.


[0] https://www.w3.org/TR/fetch-metadata/
[1] https://bugs.webkit.org/show_bug.cgi?id=204744
[2] https://www.w3.org/TR/fetch-metadata/#directly-user-initiated

More information about the webkit-dev mailing list