Re: [whatwg/fetch] More wildcards in CORS when used without credentials (#298)

> -   <span title=concept-request-response-tainting>response tainting</span> is
> -   "<code title>cors</code>", then set <var>response</var>'s
> -   <span title=concept-response-cors-exposed-header-name-list>CORS-exposed header-name list</span>
> -   to the result of <span title=concept-header-parse>parsing</span>
> -   `<code title=http-access-control-expose-headers>Access-Control-Expose-Headers</code>` in
> -   <var>response</var>'s <span title=concept-response-header-list>header list</span>.
> +   <li>
> +    <p>If <var>request</var>'s
> +    <span title=concept-request-response-tainting>response tainting</span> is
> +    "<code title>cors</code>", then run these substeps:</p>
> +
> +    <ol>
> +     <li><p>Let <var>headerNames</var> be the result of
> +     <span title=concept-header-parse>parsing</span>
> +     `<code title=http-access-control-expose-headers>Access-Control-Expose-Headers</code>` in
> +     <var>response</var>'s <span title=concept-response-header-list>header list</span>.

paragraph not enclosed

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/298/files/e210fd2c8a3473913e11114fcae9594c5697e38a#r64348108