@@ -124,8 +124,6 @@ Valid `Sec-Fetch-Dest` values include "`audio`", "`audioworklet`", "`document`",
124
124
"`report`", "`script`", "`serviceworker`", "`sharedworker`", "`style`", "`track`", "`video`",
125
125
"`worker`", "`xslt`".
126
126
127
- ISSUE(whatwg/fetch#948): `frame` and `iframe` haven't landed in Fetch yet.
128
-
129
127
In order to support forward-compatibility with as-yet-unknown request types, servers SHOULD ignore
130
128
this header if it contains an invalid value.
131
129
@@ -284,27 +282,11 @@ To <dfn abstract-op lt="set-user">set the `Sec-Fetch-User` header</dfn> for a [=
284
282
Integration with Fetch and HTML {#fetch-integration}
285
283
===========================================
286
284
287
- To support `Sec-Fetch-User`, [=request=] needs to be taught about requests which were
288
- triggered by user activation:
289
-
290
- > <strong> Monkeypatching [[FETCH]] :</strong>
291
- >
292
- > A [=request=] has a boolean <dfn for="request">user activation</dfn> . Unless stated
293
- > otherwise, it is `false`.
294
- >
295
- > Note: This is only used for [=navigation requests=] .
296
-
297
- ISSUE(whatwg/fetch#993): This should be defined in Fetch.
285
+ To support `Sec-Fetch-User`, [=request=] has a [=request/user-activation=] which is false,
286
+ unless otherwise populated by HTML's [=process a navigate fetch=] algorithm.
298
287
299
- This flag could be populated from HTML's [=process a navigate fetch=] algorithm, perhaps by
300
- inserting the following step after the current algorithm's step 2:
301
-
302
- > <strong> Monkeypatching [[HTML]] :</strong>
303
- >
304
- > 3. If <var ignore> sourceBrowsingContext</var> 's {{WindowProxy}}' s `[[Window]] ` value has
305
- > [=transient activation=] , then set <var ignore> request</var> 's [=request/user activation=] to true.
306
-
307
- ISSUE(whatwg/html#5203): This should be defined in HTML.
288
+ Fetch Metadata headers are appended to outgoing requests from within Fetch's "HTTP-network-or-cache"
289
+ algorithm, using the following steps. Consult that specification for integration details [[!FETCH]] .
308
290
309
291
<div algorithm="append fetch metadata headers">
310
292
To <dfn abstract-op export>append the Fetch metadata headers for a request</dfn> , given [=request=] |r|:
@@ -322,10 +304,6 @@ To <dfn abstract-op export>append the Fetch metadata headers for a request</dfn>
322
304
</ol>
323
305
</div>
324
306
325
- Fetch will call into the algorithm above from within its "HTTP-network-or-cache fetch" algorithm.
326
- Please consult that specification for integration details [[!FETCH]] .
327
-
328
- ISSUE(whatwg/fetch#993): This should be called from in Fetch.
329
307
330
308
Security and Privacy Considerations {#sec-priv-considerations}
331
309
==============================================================
0 commit comments