http-extensions
http-extensions copied to clipboard
httpwg
HTTP Extensions in progress
As discussed in https://github.com/httpwg/http-extensions/issues/2501 and https://github.com/httpwg/http-extensions/issues/2610, the PATCH requests needs a suiting media type to describe the message content. Since there does not seem to be an existing, suitable media...
With this PR, I attempt to clarify the role of content and transfer encoding in resumable upload that is: - the bytes for offsets are counted on a representation, where...
In https://github.com/httpwg/http-extensions/issues/2312 we discussed how a server could provide the client with access to information and resources that are generated based on the uploaded data. One solution that emerged was...
We are reporting on the behavior of `samesite=strict` cookies on cross-site windows opened through `window.open` that goes against our assumptions (implied by the current specification) on when and how `samesite=strict`...
A very ironic URL to be incorrect, but the anchor as given doesn't exist in the document.
Closes #2104 This PR removes the requirement of checking the request's redirect chain during the computation of same-site-ness. This is being done because RFC6265bis is blocked by this work but...
This requirement was removed in https://github.com/httpwg/http-extensions/pull/2750 for web compatibility reasons. We would like to add this requirement back. See also #2104
> NOTE: Some existing user agents do not support the Max-Age attribute. User agents that do not support the Max-Age attribute ignore the attribute. https://www.ietf.org/archive/id/draft-ietf-httpbis-rfc6265bis-11.html#section-4.1.2.2-3 Is there any known client...
https://github.com/httpwg/http-extensions/pull/2480 updated 6265bis with new HTML terminology, but "target browsing context" wasn't yet changed. whatwg/html#8463 is tracking that work and once it is fixed then 6265bis can use the updated...
Two browsers are already doing this ([Safari](https://webkit.org/blog/8613/intelligent-tracking-prevention-2-1/) and [Brave](https://brave.com/privacy-features/#:~:text=Brave%20caps%20the%20life%20of,clear%20cookies%20at%20any%20time.)). It might be worth documenting in the standard.
