Re: [whatwg/fetch] Always send Origin header for (non HEAD/GET) CORS requests (PR #1463)

@annevk commented on this pull request.

Apologies/beware: it might take me a while to get to a follow-up review due to vacation/onboarding.

So this makes it so that for same-origin requests whose mode is "cors" and method is not HEAD/GET you always get an Origin header. That looks okay to me.

> @@ -2953,7 +2953,7 @@ given a <a for=/>request</a> <var>request</var>, run these steps:
 
   <ol>
    <li>
-    <p>Switch on <var>request</var>'s <a for=request>referrer policy</a>:
+    <p>If <var>request</var>'s <a for=request>method</a> is not "<code>cors</code>", then switch on <var>request</var>'s <a for=request>referrer policy</a>:

You want **mode** here, not method.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1463#pullrequestreview-1053520157
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1463/review/1053520157@github.com>