Added compression dictionary disallowed flag

Author: pmeenan

fetch.bs

@@ -2303,11 +2303,6 @@ Unless stated otherwise, it is zero.
 which is "<code>basic</code>", "<code>cors</code>", or "<code>opaque</code>".
 Unless stated otherwise, it is "<code>basic</code>".
 
-<p>A <a for=/>request</a> has an associated
-<dfn export for=request id=concept-request-corp-tainting>corp tainting</dfn>,
-which is "<code>allowed</code>", or "<code>blocked</code>".
-Unless stated otherwise, it is "<code>allowed</code>".
-
 <p>A <a for=/>request</a> has an associated
 <dfn export for=request id=no-cache-prevent-cache-control>prevent no-cache cache-control header modification flag</dfn>.
 Unless stated otherwise, it is unset.
@@ -2319,9 +2314,14 @@ Unless stated otherwise, it is unset.
 <dfn export for=request id=timing-allow-failed>timing allow failed flag</dfn>. Unless stated
 otherwise, it is unset.
 
+<p>A <a for=/>request</a> has an associated
+<dfn export for=request id=compression-dictionary-disallowed>compression dictionary disallowed flag</dfn>.
+Unless stated otherwise, it is unset.
+
 <p class=note>A <a for=/>request</a>'s <a for=request>URL list</a>, <a for=request>current URL</a>,
 <a for=request>redirect count</a>, <a for=request>response tainting</a>,
-<a for=request>done flag</a>, and <a for=request>timing allow failed flag</a> are used as
+<a for=request>done flag</a>, <a for=request>timing allow failed flag</a>, and
+<a for=request>compression dictionary disallowed flag</a> are used as
 bookkeeping details by the <a for=/>fetch</a> algorithm.
 
 <p>A <a for=/>request</a> has an associated
@@ -5022,6 +5022,18 @@ steps:
     </ol>
   </dl>
 
+ <li><p>If <var>request</var>'s <a for=request>response tainting</a> is "<code>opaque</code>",
+ then:
+
+ <ol>
+   <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a>
+   `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s
+   <a for=response>header list</a>.
+
+   <li><p>If <var>corpPolicy</var> is not `<code>cross-origin</code>`, then set
+   <var>request</var>'s <a for=request>compression dictionary disallowed flag</a>.
+ </ol>
+
  <li><p>If <var>recursive</var> is true, then return <var>response</var>.
 
  <li>
@@ -6565,8 +6577,9 @@ run these steps:
  <var>request</var> and the given realm.
 
  <li>
-  <p>If <var>response</var>'s <a for=response>header list</a>
-  <a for="header list">contains</a> `<code>Use-As-Dictionary</code>`:
+  <p>If <var>request</var>'s <a for=request>compression dictionary disallowed flag</a> is not set
+  and <var>response</var>'s <a for=response>header list</a> <a for="header list">contains</a>
+  `<code>Use-As-Dictionary</code>`:
   <!-- This is defined in [[!RFC9842]] -->
 
   <ol>
@@ -6589,13 +6602,6 @@ run these steps:
    <li><p>If <var>pattern</var> is failure or <var>pattern</var> <a for=/>has regexp groups</a>,
    then return <var>response</var>.
 
-   <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a>
-   `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s
-   <a for=response>header list</a>.
-
-   <li><p>If <var>request</var>'s <a for=request>response tainting</a> is "<code>opaque</code>" and
-   <var>corpPolicy</var> is not `<code>cross-origin</code>`, then return <var>response</var>.
-
    <li><p>Let <var>expirationTime</var> be the time at which the <var>response</var> becomes
    a <a>stale response</a>.
 
@@ -6663,13 +6669,8 @@ given a <a for=/>fetch params</a> <var>fetchParams</var>, an optional boolean
  <li><p>If <var>codings</var> is null or does not contain `<code>dcb</code>` or `<code>dcz</code>`,
  then return <var>response</var>.
 
- <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a>
- `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s
- <a for=response>header list</a>.
-
- <li><p>If <var>response</var>'s <a for=response>type</a> is "<code>opaque</code>" and
- <var>corpPolicy</var> is not `<code>cross-origin</code>`, then return a
- <a>network error</a>.
+ <li><p>If <var>request</var>'s <a for=request>compression dictionary disallowed flag</a>
+ is set, then return a <a>network error</a>.
 
  <li><p>Let <var>availableDictionaryHash</var> be the result of
  <a>getting a structured field value</a> given `<code>Available-Dictionary</code>`,