update changelog

oauth-wg · Feb 28, 2024 · 741f882 · 741f882
1 parent 7cd74c4
commit 741f882
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/draft-ietf-oauth-browser-based-apps.md b/draft-ietf-oauth-browser-based-apps.md
@@ -1462,13 +1462,19 @@ Document History
 
 [[ To be removed from the final specification ]]
 
+-17
+
+* Added a section on anti-forgery/double-submit cookies as another form of CSRF protection
+* Updated CORS terminology
+* Moved new section on in-browser flows as not applicable to BFF or TM patterns
+* Fixed usage of some browser technology terminology
+* Editorial improvements
+
 -16
 
 * Applied editorial changes from Filip Skokan and Louis Jannett
 * Clarified when cookie encryption applies
 * Added a section with security considerations on the use of postMessage
-* Added a section on anti-forgery/double-submit cookies as another form of CSRF protection
-* Updated CORS terminology
 
 -15