diff --git a/fetch.bs b/fetch.bs index c210c74a2..7d7f4d920 100644 --- a/fetch.bs +++ b/fetch.bs @@ -2321,8 +2321,7 @@ source of security bugs. Please seek security review for features that deal with
  • Assert: response's URL list is not empty.

  • -

    Let url be a copy of response's URL list's first - element. +

    Let url be a copy of response's URL list[0].

    This is not response's URL in order to avoid leaking information about redirect targets (see @@ -2393,8 +2392,8 @@ end-user. URL list (a list of zero or more URLs). Unless stated otherwise, it is « ». -

    Except for the last URL, if any, a response's -URL list is not exposed to script as that would violate +

    Except for the first and last URL, if any, a response's +URL list is not directly exposed to script as that would violate atomic HTTP redirect handling.

    A response has an associated @@ -4634,8 +4633,8 @@ steps:

    If internalResponse's URL list is empty, then set it to a clone of request's URL list. -

    A response's URL list can be empty (for example, - when the response represents an about URL). +

    A response's URL list can be empty, e.g., when + fetching an about: URL. @@ -8318,8 +8317,8 @@ otherwise this's response's URL, to true.

    The redirected getter steps are to return true if -this's response's URL list has more than one item; -otherwise false. +this's response's URL list's size is +greater than 1; otherwise false.

    To filter out responses that are the result of a redirect, do this directly through the API, e.g., fetch(url, { redirect:"error" }).