Restrict C-L caching to same-origin

MikeBishop · Apr 12, 2024 · 8f680f3 · 8f680f3
1 parent cfcedd7
commit 8f680f3
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/draft-ietf-httpbis-safe-method-w-body.xml b/draft-ietf-httpbis-safe-method-w-body.xml
@@ -249,10 +249,10 @@ q=foo&amp;limit=10&amp;sort=-published
       </t>
 
       <t>
-        If a successful response includes a Content-Location header field, the
-        response content also reflects the current state of the indicated
-        resource and MAY also be used to satisfy future requests for that
-        resource.
+        If a successful response includes a Content-Location header field with
+        the same origin as the requested resource, the response content also
+        reflects the current state of the indicated resource and MAY also be
+        used to satisfy future requests for that resource.
       </t>
 
     </section>