From 662dc2eb6af0c2fd9e617b7116b67a903c5eb180 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nicol=C3=A1s=20Pe=C3=B1a=20Moreno?= Date: Mon, 23 Sep 2024 18:21:07 -0400 Subject: [PATCH] Apply suggestions from code review Co-authored-by: Ted Thibodeau Jr --- spec/index.bs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/spec/index.bs b/spec/index.bs index eec0862c..2b6a76d2 100644 --- a/spec/index.bs +++ b/spec/index.bs @@ -330,10 +330,10 @@ const credential = await navigator.credentials.get({ ``` -For fetches that are sent with cookies, unpartitioned +When fetches are sent with cookies, unpartitioned [SameSite](https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-samesite-attribute-2)=None cookies are included. It doesn't introduce security issues on the API even when third-party cookies are otherwise -disabled because the [=RP=] cannot inspect the results from the fetches on its own (e.g. the browser mediates what +disabled because the [=RP=] cannot inspect the results from the fetches on its own (i.e., the browser mediates what the [=RP=] can receive).