From eefc88208f0b1a112d553d3cd9d8a0512c49095a Mon Sep 17 00:00:00 2001 From: Anne van Kesteren Date: Mon, 28 May 2018 14:39:53 +0200 Subject: [PATCH] Make CORS-preflight fetches set the CORS flag Otherwise a 401 response would not necessarily result in rejection. Fixes #741. --- fetch.bs | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/fetch.bs b/fetch.bs index 5598cb1d5..0a2ec88e9 100644 --- a/fetch.bs +++ b/fetch.bs @@ -4138,8 +4138,8 @@ the CORS protocol is understood. The so-called CORS-preflight request< successful it populates the CORS-preflight cache to minimize the number of these fetches. -

To perform a CORS-preflight fetch using request, run these -steps: +

To perform a CORS-preflight fetch using request, +run these steps:

  1. @@ -4184,8 +4184,7 @@ steps: 0x2C is not the way this was implemented, for better or worse.
  2. Let response be the result of performing an - HTTP-network-or-cache fetch using - preflight. + HTTP-network-or-cache fetch using preflight with the CORS flag set.

  3. If a CORS check for request and response returns success