06:38
<sideshowbarker>
https://stackoverflow.com/questions/75027584/unexpected-websocket-buffer-data-w-masked-fragmented-messages-as-data-grows-s
13:38
<annevk>
Arthur Hemery: missed your question yesterday somehow. The idea is that HTML pokes through to the internal response for that, but it probably does not do so today.
13:39
<annevk>
Arthur Hemery: Fetch doesn't remove the headers, but it does obscure them. (Given Spectre ideally we would remove most headers before handing the response to an attacker process, but that's a thing we haven't tried tackling so far.)