diff --git a/spec/index.bs b/spec/index.bs index eec0862c..2b6a76d2 100644 --- a/spec/index.bs +++ b/spec/index.bs @@ -330,10 +330,10 @@ const credential = await navigator.credentials.get({ ``` -For fetches that are sent with cookies, unpartitioned +When fetches are sent with cookies, unpartitioned [SameSite](https://httpwg.org/http-extensions/draft-ietf-httpbis-rfc6265bis.html#name-the-samesite-attribute-2)=None cookies are included. It doesn't introduce security issues on the API even when third-party cookies are otherwise -disabled because the [=RP=] cannot inspect the results from the fetches on its own (e.g. the browser mediates what +disabled because the [=RP=] cannot inspect the results from the fetches on its own (i.e., the browser mediates what the [=RP=] can receive).