diff --git a/fetch.bs b/fetch.bs index e9485840e..c1136cb0e 100644 --- a/fetch.bs +++ b/fetch.bs @@ -918,10 +918,6 @@ provides a convenient way for standards to not have to set Request's origin can be changed during redirects too. -
A request has an associated
-omit-Origin
-header flag. Unless stated
-otherwise it is unset.
-
A request has an associated
referrer, which is
"no-referrer
", "client
", or a URL. Unless stated otherwise it
@@ -1747,7 +1743,7 @@ of the `Referer
` [sic] header that does not reveal a
path. It is used for
all HTTP fetches whose CORS flag is
set as well as those where request's
-method is `POST
`. Due to
+method neither `GET
` nor `HEAD
`. Due to
compatibility constraints it is not included in all
fetches.
@@ -1797,8 +1793,9 @@ performed, to ensure request's
A CORS request is an HTTP request that includes an
`Origin
` header. It cannot be reliably identified as particpating in
-the CORS protocol as the `Origin
` header is sometimes
-included for other purposes too.
+the CORS protocol as the `Origin
` header is also included for
+all requests whose method is neither `GET
` nor
+`HEAD
`.
A CORS-preflight request is a CORS request that checks to see
if the CORS protocol is understood. It uses `OPTIONS
` as
@@ -3127,10 +3124,11 @@ steps:
-
If httpRequest's omit-Origin
-header flag is unset,
- append `Origin
`/httpRequest's
- origin, serialized and
- utf-8 encoded, to httpRequest's header list.
+
If the CORS flag is set or httpRequest's method is
+ neither `GET
` nor `HEAD
`, then append
+ `Origin
`/httpRequest's origin,
+ serialized and utf-8 encoded, to
+ httpRequest's header list.
If httpRequest's header list does
@@ -4602,8 +4600,6 @@ constructor must run these steps:
current settings object,
window is window,
origin is "client
",
- omit-Origin
-header flag is request's
- omit-Origin
-header flag,
referrer is request's
referrer,
referrer policy is
@@ -4634,8 +4630,6 @@ constructor must run these steps:
"navigate
", then set it to "same-origin
".
-
Unset request's omit-Origin
-header flag.
-
Set request's referrer to
"client
"