From d5c3d8b5570074e05c86a552e8a738daa19976cd Mon Sep 17 00:00:00 2001 From: Anne van Kesteren Date: Thu, 9 Jan 2020 11:34:32 +0100 Subject: [PATCH] Change the Access-Control-Max-Age default to 5 Already covered by web-platform-tests. Fixes #990. --- fetch.bs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/fetch.bs b/fetch.bs index 4cab33292..1ec576be7 100644 --- a/fetch.bs +++ b/fetch.bs @@ -2601,7 +2601,7 @@ if the CORS protocol is understood. It uses `OPTIONS` as URL for the purposes of the CORS protocol.
`Access-Control-Max-Age` -

Indicates how long the information provided by the +

Indicates the number of seconds (5 by default) the information provided by the `Access-Control-Allow-Methods` and `Access-Control-Allow-Headers` headers can be cached. @@ -4955,7 +4955,7 @@ run these steps: `Access-Control-Max-Age` and response's header list. -

  • If max-age is failure or null, then set max-age to zero. +

  • If max-age is failure or null, then set max-age to 5.

  • If max-age is greater than an imposed limit on max-age, then set max-age to the imposed limit.