How to use this reference
Review an owned service’s documented request-context policy, including redirects, legitimate cross-origin use, and caching. Treat browser context as an additional policy input rather than proof of a user’s resource permissions.
Before reading
- HTTP requests and response caching
- Same-origin and same-site distinctions
Context and limits
- The reviewed edition is a Working Draft, not a final W3C Recommendation.
- The draft does not establish support in every deployed browser or non-browser client.
Sources and provenance
- Fetch Metadata Request Headers World Wide Web Consortium · reviewed 2026-10-03
- Fetch Metadata Request Headers publication history World Wide Web Consortium · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.