diff --git a/index.bs b/index.bs index 4fec324..bebaab3 100644 --- a/index.bs +++ b/index.bs @@ -361,7 +361,7 @@ spec: SHA2; urlPrefix: http://csrc.nist.gov/publications/fips/fips180-4/fips-180 In order to mitigate an attacker's ability to read data cross-origin by brute-forcing values via integrity checks, responses are only eligible for such checks if they are same-origin or are the result of explicit access granted to - the loading origin via Cross Origin Resource Sharing [[!CORS]]. + the loading origin via Cross Origin Resource Sharing [[!Fetch]]. Note: As noted in RFC6454, section 4,