mdn/content

Be more accurate about cross-origin protections

Open

#23,740 建立於 2023年1月18日

在 GitHub 查看
 (0 留言) (0 反應) (0 負責人)Markdown (22,427 fork)batch import
Content:WebAPIarea: Performance APIeffort: mediumhelp wanted

倉庫指標

Star
 (8,900 star)
PR 合併指標
 (平均合併 7天 3小時) (30 天內合併 147 個 PR)

描述

MDN URL

https://developer.mozilla.org/en-US/docs/Web/API/Resource_Timing_API

What specific section or headline is this issue about?

No response

What information was incorrect, unhelpful, or incomplete?

  • Timing-Allow-Origin is needed for CORS and no-cors, it's for cross-origin protection
  • In the case of cross-origin iframes, responseEnd might measure when the iframe finished loading completely with all its subresources, not just the main resource.
  • encoded/decoded body size are (soon to be) CORS-protected rather than TAO protected

What did you expect to see?

See above

Do you have any supporting links, references, or citations?

No response

Do you have anything more you want to share?

No response

MDN metadata

貢獻者指南