Update security_privacy_self_review.md for exposing Origin

Fixes #124
WICG · Feb 5, 2024 · 3e10db8 · 3e10db8
1 parent 190f5d7
commit 3e10db8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/security_privacy_self_review.md b/security_privacy_self_review.md
@@ -23,6 +23,9 @@ laid out.
 
 See #41 for a discussion of these points.
 
+Also, in the prelights we send the initiator's `Origin`.  This was necessary to give servers in the private network enough information
+to decide whether they should allow the requests from public.
+
 ## 2. Is this specification exposing the minimum amount of information necessary to power the feature?
 
 Yes, apart from the above.