Skip to content

Issues: annevk/orb

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

18 Open 14 Closed
18 Open 14 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Blocking JSON breaks web compat
#43 opened Oct 2, 2023 by farre
3
It's unclear how multipart/x-mixed-replace should be handled
#42 opened Sep 15, 2023 by farre
3
Avoid ORB checks for navigator.sendBeacon
#41 opened Jun 22, 2023 by zcorpan
2
ORB uses audio-or-video-type-pattern-matching-algorithm in an indeterministic way.
#40 opened Apr 14, 2023 by farre
1
It is unclear if blocking no-cors is web-compatible
#39 opened Mar 23, 2023 by smaug----
8
Clarify the behaviour of Javascript Validation when we are waiting for the full body
#38 opened Jan 3, 2023 by sefeng211
1
Consider an alternative strategy for media that does not rely on media elements directly future
#33 opened Apr 1, 2022 by anforowicz
8
Should ORB block application/signed-exchange responses
#32 opened Mar 30, 2022 by anforowicz
1
Should ORB block application/javascript with either JSON or JS-parser-breakers mvp
#30 opened Nov 12, 2021 by anforowicz
6
HLS manifest is fetched across origins mvp
#29 opened Oct 27, 2021 by annevk
12
Stricter filter for responses without MIME type future
#28 opened Oct 4, 2021 by annevk
Blocklist based on sniffing future
#27 opened Oct 4, 2021 by annevk
No size limit
#22 opened Feb 22, 2021 by MattMenke2
10
Incentives against using text/javascript almost everywhere future
#19 opened Jan 28, 2021 by anforowicz
1
Restrict fetch(..., { mode: "no-cors" }) more future
#18 opened Jan 27, 2021 by annevk
Could be stricter on safelisted CSS and JS MIME types future
#12 opened Jan 13, 2021 by annevk
How to decode potential JavaScript mvp
#7 opened Jan 11, 2021 by annevk
6
Graceful fallback for future image types
#3 opened Jun 23, 2020 by anforowicz
1
47
ProTip! Updated in the last three days: updated:>2025-01-06.