Search results

Blocking JSON breaks web compat

Status: Open.

#43 In annevk/orb;

· farre opened on Oct 2, 2023

It's unclear how multipart/x-mixed-replace should be handled

Status: Open.

#42 In annevk/orb;

· farre opened on Sep 15, 2023

Avoid ORB checks for navigator.sendBeacon

Status: Open.

#41 In annevk/orb;

· zcorpan opened on Jun 22, 2023

ORB uses <code>audio-or-video-type-pattern-matching-algorithm</code> in an indeterministic way.

Status: Open.

#40 In annevk/orb;

· farre opened on Apr 14, 2023

It is unclear if blocking no-cors is web-compatible

Status: Open.

#39 In annevk/orb;

· smaug---- opened on Mar 23, 2023

Clarify the behaviour of Javascript Validation when we are waiting for the full body

Status: Open.

#38 In annevk/orb;

· sefeng211 opened on Jan 3, 2023

Consider an alternative strategy for media that does not rely on media elements directly

future

Status: Open.

#33 In annevk/orb;

· anforowicz opened on Apr 1, 2022

Should ORB block application/signed-exchange responses

Status: Open.

#32 In annevk/orb;

· anforowicz opened on Mar 30, 2022

Should ORB block application/javascript with either JSON or JS-parser-breakers

mvp

Status: Open.

#30 In annevk/orb;

· anforowicz opened on Nov 12, 2021

HLS manifest is fetched across origins

mvp

Status: Open.

#29 In annevk/orb;

· annevk opened on Oct 27, 2021

Stricter filter for responses without MIME type

future

Status: Open.

#28 In annevk/orb;

· annevk opened on Oct 4, 2021

Blocklist based on sniffing

future

Status: Open.

#27 In annevk/orb;

· annevk opened on Oct 4, 2021