25568 2014-05-06 03:42:06 +0000 [imports]: Respect the crossOrigin attribute 2015-07-06 08:14:56 +0000 1 1 1 Unclassified WebAppsWG HISTORICAL - Component Model unspecified PC All RESOLVED MOVED P2 normal --- 20683 1 pdr morrita adamk dglazkov mike public-webapps public-webapps-bugzilla oldest_to_newest 105149 0 pdr 2014-05-06 03:42:06 +0000 The 7.4 Fetching Import section states "All imports ... must be loaded using the fetching algorithm with request's origin set to the origin of the master docment [SIC], the mode to CORS and the omit credentials mode to CORS." Why is the <link> crossOrigin attribute[1] not respected here? This would allow non-anonymous imports, for example. [1] http://www.w3.org/html/wg/drafts/html/master/single-page.html#attr-link-media 105270 1 morrita 2014-05-07 00:59:02 +0000 This seems a reasonable addition. 105511 2 morrita 2014-05-08 23:22:05 +0000 ...but turns out this is a bit tricky. That's because cross-origin handling for imports is different from other resources. We have to touch the definition of CORS setting attribute [1] so that referring side can override the value of omitted case. [1] http://www.whatwg.org/specs/web-apps/current-work/multipage/fetching-resources.html#cors-settings-attribute 121730 3 hayato 2015-07-06 08:14:56 +0000 Moved to https://github.com/w3c/webcomponents/issues/216