I don't understand why https://w3c-fedid.github.io/FedCM/#fetch-config-file performs its own CSP check. Why is that not handled by the fetch invocation later on?
I don't understand why https://w3c-fedid.github.io/FedCM/#fetch-config-file performs its own CSP check. Why is that not handled by the fetch invocation later on?