Slide 23
Slide 23 text
Safe Speculation
Make sure speculation requests are safe to make - avoid stateful GET requests like:
● Sign-out & Language switching URLs.
● "Add to cart" URLs.
● Server-side action URLs, e.g. sending an SMS & etc
Filter the pages in the Speculation Rules.
Watch Sec-Purpose HTTP request header for “prefetch” or “prerender”.
Send an error response code from server to cancel speculation if necessary.
For unsafe client code, use prerenderingchange to attach JS code.