diff --git a/fetch.bs b/fetch.bs index e9485840e..c1136cb0e 100644 --- a/fetch.bs +++ b/fetch.bs @@ -918,10 +918,6 @@ provides a convenient way for standards to not have to set Request's origin can be changed during redirects too. -

A request has an associated -omit-Origin-header flag. Unless stated -otherwise it is unset. -

A request has an associated referrer, which is "no-referrer", "client", or a URL. Unless stated otherwise it @@ -1747,7 +1743,7 @@ of the `Referer` [sic] header that does not reveal a path. It is used for all HTTP fetches whose CORS flag is set as well as those where request's -method is `POST`. Due to +method neither `GET` nor `HEAD`. Due to compatibility constraints it is not included in all fetches. @@ -1797,8 +1793,9 @@ performed, to ensure request's

A CORS request is an HTTP request that includes an `Origin` header. It cannot be reliably identified as particpating in -the CORS protocol as the `Origin` header is sometimes -included for other purposes too. +the CORS protocol as the `Origin` header is also included for +all requests whose method is neither `GET` nor +`HEAD`.

A CORS-preflight request is a CORS request that checks to see if the CORS protocol is understood. It uses `OPTIONS` as @@ -3127,10 +3124,11 @@ steps: -

  • If httpRequest's omit-Origin-header flag is unset, - append `Origin`/httpRequest's - origin, serialized and - utf-8 encoded, to httpRequest's header list. +

  • If the CORS flag is set or httpRequest's method is + neither `GET` nor `HEAD`, then append + `Origin`/httpRequest's origin, + serialized and utf-8 encoded, to + httpRequest's header list.

  • If httpRequest's header list does @@ -4602,8 +4600,6 @@ constructor must run these steps: current settings object, window is window, origin is "client", - omit-Origin-header flag is request's - omit-Origin-header flag, referrer is request's referrer, referrer policy is @@ -4634,8 +4630,6 @@ constructor must run these steps: "navigate", then set it to "same-origin". -

  • Unset request's omit-Origin-header flag. -

  • Set request's referrer to "client"