ldm0 4a1e6fd196 fix(fetch): unify script headers and CORS response validation ...

Generate Origin independently of browser destination metadata, and attach script
metadata at classic, module, and preload request builders. Share redirect URL-list
rules across request generation and response validation, and remove final-only
CORS validation from manifests, stylesheets, and request interception.

Reject failed CORS checks even without supported integrity metadata. Preserve CSP
reporting before dynamic script fetches and use committed Window origins for
srcdoc and sandboxed child script/module requests.

Add wire-level Origin, Cookie, and Fetch Metadata regressions, plus manifest,
stylesheet CSSOM, CSP, and child module/preload coverage.

2026-09-13 04:46:51 +08:00

..

child_script_text.rs

fix(dom): include CDATA in child text content

2026-09-10 05:50:52 +08:00

integrity.rs

fix(fetch): unify script headers and CORS response validation

2026-09-13 04:46:51 +08:00