Re: [REFERRER] origin-when-crossorigin OR origin-when-cross-origin

On Sat, May 9, 2015 at 6:00 AM, Jerry Qu <quguangyu@gmail.com> wrote:

> And after my test on the Chrome 42, only the 'origin-when-crossorigin'
> directive will work both on CSP and <meta>.
>
> Is Chrome wrong?
>

Yup. Typos are fun. Thanks for the bug report!

I've fixed the spec in
https://github.com/w3c/webappsec/commit/c992d5cd9c93eaa509ee499efd7ef8f5ab9811d8;
I'll upload a patch for Chrome later today.

-mike

--
Mike West <mkwst@google.com>, @mikewest

Google Germany GmbH, Dienerstrasse 12, 80331 München,
Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der
Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth
Flores
(Sorry; I'm legally required to add this exciting detail to emails. Bleh.)