[whatwg/fetch] Request's tainted origin flag fallout (#756)

@yutakahirano noticed one more place that relied request's origin becoming an opaque origin: step 5 of main fetch.

I incorrectly assumed this wouldn't be a problem due to the CORS flag, but the CORS flag is not set if the initial request was same-origin.

I think making the first conditional of step 5 instead read

> request's current url's origin is same origin with request's origin, CORS flag is unset, and either request's tainted origin flag is unset or request's mode is not "cors"

would fix this.

This is somewhat related to #737.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/756