Block redirects to scripts over XMLHttpRequest and fetch
Background
Currently we don't allow redirects to scripts if the type of the request is script
. It is however possible to load a script using XMLHttpRequest
or fetch
. In such cases, if the request is redirected, the redirect could either be blocked or avoided by looking at the MIME type of the response.
What to change
TBD
Edited by Manish Jethani