[Webkit-unassigned] [Bug 175569] Add the PerformanceServerTiming Interface which makes Server-Timing header timing values available to JavaScript running in the browser.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Mon Apr 2 15:30:46 PDT 2018


--- Comment #28 from cvazac at gmail.com ---
(In reply to youenn fablet from comment #25)
> By the way, is there any implication in leaking such header value
> information to third party origins? Is the plan to rely on
> Timing-Allow-Origin?

Yes, exactly. Parsing server timing headers is gated by `m_allowTimingDetails`

You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180402/2e883303/attachment-0002.html>

More information about the webkit-unassigned mailing list