@@ -158,7 +158,8 @@ Streams, and URL Standards.
158158[[!STREAMS]]
159159[[!URL]]
160160
161- <p> <dfn>ABNF</dfn> means ABNF as modified by HTTP (in particular the addition <code> #</code> ).
161+ <p> <dfn>ABNF</dfn> means ABNF as augmented by HTTP (in particular the addition <code> #</code> ) and
162+ RFC 7405. [[!RFC7405]]
162163
163164<hr>
164165
@@ -2370,7 +2371,7 @@ compatibility constraints it is not included in all
23702371<pre>
23712372Origin = origin-or-null
23722373
2373- origin-or-null = origin / %x6E.75.6C.6C ; "null", case-sensitive
2374+ origin-or-null = origin / %s "null" ; case-sensitive
23742375origin = <a for=url>scheme</a> "://" <a for=url>host</a> [ ":" <a for=url>port</a> ] </pre>
23752376
23762377<p class="note no-backref"> This supplants the `<code> Origin</code> `
@@ -2507,7 +2508,7 @@ Access-Control-Request-Headers = 1#<a spec=http>field-name</a>
25072508
25082509wildcard = "*"
25092510Access-Control-Allow-Origin = origin-or-null / wildcard
2510- Access-Control-Allow-Credentials = %x74.72.75.65 ; "true", case-sensitive
2511+ Access-Control-Allow-Credentials = %s "true" ; case-sensitive
25112512Access-Control-Expose-Headers = #<a spec=http>field-name</a>
25122513Access-Control-Max-Age = <a spec=http-caching>delta-seconds</a>
25132514Access-Control-Allow-Methods = #<a spec=http>method</a>
@@ -2982,7 +2983,7 @@ response <a for=/>header</a> can be used to require checking a <a for=/>request<
29822983<p> Its <a for=header>value</a> <a>ABNF</a> :
29832984
29842985<pre>
2985- Cross-Origin-Resource-Policy = %x73.61.6D.65.2D.6F.72.69.67.69.6E / %x73.61.6D.65.2D.73.69.74.65 ; "same-origin" / "same-site", case-sensitive</pre>
2986+ Cross-Origin-Resource-Policy = %s "same-origin" / %s "same-site" ; case-sensitive</pre>
29862987
29872988<p> To perform a <dfn>cross-origin resource policy check</dfn> , given a <var> request</var> and
29882989<var> response</var> , run these steps:</p>
0 commit comments