[whatwg/fetch] Fix inverted redirect-taint check for COEP: credentialless (PR #1959)

The check was introduced in 0613515 as "request's tainted origin flag is not set" and converted in 5dc54a7 to "request does not have a redirect-tainted origin". The conversion to the redirect-taint tri-state in 1d9380b dropped the negation's meaning, making
"Cross-Origin-Embedder-Policy allows credentials" return true precisely when the request had been redirect-tainted, rather than when it had not.

Fixes #1958.
You can view, comment on, or merge this pull request online at:

  https://github.com/whatwg/fetch/pull/1959

-- Commit Summary --

  * Fix inverted redirect-taint check for COEP: credentialless

-- File Changes --

    M fetch.bs (2)

-- Patch Links --

https://github.com/whatwg/fetch/pull/1959.patch
https://github.com/whatwg/fetch/pull/1959.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/pull/1959
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/pull/1959@github.com>