diff --git a/fetch.bs b/fetch.bs index 4b1f0c2ca..8638898f1 100644 --- a/fetch.bs +++ b/fetch.bs @@ -4477,19 +4477,27 @@ steps:

  • Let response be null. -

  • If request's local-URLs-only flag is set and request's - current URL is not local, then set response to a - network error. +

  • +

    If fetchParams's preloaded response candidate is null: + +

      +

    1. If request's local-URLs-only flag is set and request's + current URL is not local, then set response to a + network error. + +

    2. Run report Content Security Policy violations for request. -

    3. Run report Content Security Policy violations for request. +

    4. Upgrade request to a potentially trustworthy URL, if appropriate. -

    5. Upgrade request to a potentially trustworthy URL, if appropriate. +

    6. Upgrade a mixed content request to a potentially trustworthy URL, if appropriate. -

    7. Upgrade a mixed content request to a potentially trustworthy URL, if appropriate. +

    8. If should request be blocked due to a bad port or + should request be blocked by Content Security Policy + returns blocked, then set response to a network error. +

    -

  • If should request be blocked due to a bad port, - should fetching request be blocked as mixed content, or - should request be blocked by Content Security Policy +

  • If + should fetching request be blocked as mixed content returns blocked, then set response to a network error.

  • If request's referrer policy is the empty string, then set