[Webkit-unassigned] [Bug 175569] Add the PerformanceServerTiming Interface which makes Server-Timing header timing values available to JavaScript running in the browser.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=175569

--- Comment #28 from cvazac at gmail.com ---
(In reply to youenn fablet from comment #25)
> By the way, is there any implication in leaking such header value
> information to third party origins? Is the plan to rely on
> Timing-Allow-Origin?

Yes, exactly. Parsing server timing headers is gated by `m_allowTimingDetails`

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20180402/2e883303/attachment-0002.html>