From d38a22870ebb801668cee195283049d0d4862f4a Mon Sep 17 00:00:00 2001 From: Noam Rosenthal Date: Tue, 28 Jan 2025 20:12:17 +0000 Subject: [PATCH] Update fetch.bs Co-authored-by: Dominic Farolino --- fetch.bs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fetch.bs b/fetch.bs index 23c8314fc..8f646ab0b 100644 --- a/fetch.bs +++ b/fetch.bs @@ -9122,7 +9122,7 @@ read their contents. providing a `Cross-Origin-Resource-Policy` header (CORP). By supplying the appropriate CORP header, a resource can opt out from being embedded by a different site or origin. For example, this can be used to protect an image's natural dimensions from -being read by an embedded. +being read by an embedder.

This protection is especially important when exposing powerful features to the web platform, that gain enough access to the underlying platform to read cross-origin resources using attacks like