This was a security mechanism introduced in the fetch spec, with supporting AOs added to the FileAPI spec.