From a7b9b13ace675abaaedd0a74b2bfabe6603fc4f0 Mon Sep 17 00:00:00 2001
From: Arthur Sonzogni If request's client is null, return true. If request's client's embedder policy is not "credentialless
", return true.credentialless
", return true.
If request's origin is same origin with request's current URL's origin, return true.
@@ -1997,8 +1997,8 @@ being provided to an API that didn't make a range request. See the flag's usage description of the attack.A response has an associated request-include-credentials, which is -initially set. +id=concept-response-request-include-credentials>request-include-credentials (a boolean), which +is initially true.
A response has an associated timing allow passed flag, which is @@ -4703,7 +4703,7 @@ steps. They return a response.
is true; otherwise false. -
If Cross-Origin-Embedder-Policy allows credentials with request is +
If Cross-Origin-Embedder-Policy allows credentials with request returns false, set includeCredentials to false.
Let contentLength be httpRequest's body's