Skip to content

fix: Let Edge to send fetch requests using default config#1236

Merged
kamilogorek merged 1 commit intomasterfrom
edge-fetch
Feb 21, 2018
Merged

fix: Let Edge to send fetch requests using default config#1236
kamilogorek merged 1 commit intomasterfrom
edge-fetch

Conversation

@kamilogorek
Copy link
Contributor

Fixes #1233

We add referrer because this comment #1177 (comment)

However, there's no easy way to test this behavior, as:

  • mocking fetch won't call it's native implementation, therefore not throw an error
  • spying on fetch won't modify response object, and without it, we'll always jump into onError handler because we get no ok in resp data

I'm not really convinced if this is a good idea... It just feels odd, but I cannot think of any simple, yet an acceptable solution to this issue.

Thoughts?

@kamilogorek kamilogorek requested a review from a team February 20, 2018 10:40
Copy link
Member

@HazAT HazAT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess this is fine and probably the only thing we could do here.
Even though I am not sure if we still require referrer on the server but we can't force people to update their server so we have to live with it.

@kamilogorek kamilogorek merged commit 97b63e2 into master Feb 21, 2018
@kamilogorek kamilogorek deleted the edge-fetch branch February 21, 2018 12:43
chargome added a commit that referenced this pull request Mar 23, 2026
Fixes Dependabot alerts #1236 (SSE Event Injection) and #1237
(Path Traversal via Double Decoding) by updating the yarn.lock
resolution for h3 from 1.15.5 to 1.15.10.

Co-Authored-By: Claude <noreply@anthropic.com>
chargome added a commit that referenced this pull request Mar 23, 2026
Fixes Dependabot alerts #1236 (SSE Event Injection) and #1237 (Path
Traversal via Double Decoding) by updating the yarn.lock resolution for
h3 from 1.15.5 to 1.15.10.

Easier fix than
#19910 as Nuxt 3.21.x
introduced breaking type changes (removed nitro from NuxtOptions and
nitro:config from NuxtHooks).

Co-authored-by: Claude Sonnet 4 <noreply@anthropic.com>
logaretm pushed a commit that referenced this pull request Mar 24, 2026
Fixes Dependabot alerts #1236 (SSE Event Injection) and #1237 (Path
Traversal via Double Decoding) by updating the yarn.lock resolution for
h3 from 1.15.5 to 1.15.10.

Easier fix than
#19910 as Nuxt 3.21.x
introduced breaking type changes (removed nitro from NuxtOptions and
nitro:config from NuxtHooks).

Co-authored-by: Claude Sonnet 4 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants