That's right. Thanks for the catch! Fixed: https://github.com/w3c/webcomponents/commit/90da4809a207916486bc7af83a568f3762e780a0
On Tue, Jul 15, 2014 at 10:00 AM, Boris Zbarsky <bzbar...@mit.edu> wrote: > In http://w3c.github.io/webcomponents/spec/imports/#fetching-import the > spec says: > > Fetch a resource from LOCATION with request's origin set to the > origin of the master document, the mode to CORS and the omit > credentials mode to CORS. > > There is no "omit credentials" mode in the current Fetch draft, and the > mode that _is_ there, "credentials mode", doesn't have "CORS" as a value. > Presumably this is asking for "same-origin"? > > -Boris > > -- morrita