jubobs / cv Goto Github PK

Hello,

I just read your blog post, The great SameSite confusion. It's a very clear explanation, thank you! I couldn't find an email address on your website so I'm contacting you this way instead... sorry about that, but I couldn't see any other way to easily get in touch (I don't have a Twitter account).

At the end of the section, What do we mean by “site”?, you wrote:

... the concept of site is still evolving and will soon incorporate the scheme also... However, to sidestep this difficulty and prolong the relevance of this post, I’ll only consider origins whose scheme is https in what follows.

Shouldn't that be, "I'll only consider sites whose scheme is https..."?

In the next section, Same-site vs. cross-site requests, you wrote:

Whether a request is same-site or cross-site depends on the comparison between the sites of the request’s source origin and target origin

And you use the same language, talking about the sites of origins, in the examples. This is accurate... but it is a little confusing. At least, it was to me. It might be less confusing to just say the sites of the request's source and target?

Anyway, that was just an idea I had while reading the blog post. I hope you don't mind my sharing it. Thanks again for the post!