Add no-cors dictionary support with Cross-Origin-Resource-Policy opt-in

Author: pmeenan

fetch.bs

@@ -6504,8 +6504,14 @@ run these steps:
    <li><p>Let <var>compressionDictionaryCache</var> be the result of
    <a>determining the compression-dictionary cache partition</a> given <var>request</var>.
 
-   <li><p>If <var>compressionDictionaryCache</var> is null or <var>request</var>'s
-   <a for=request>response tainting</a> is "<code>opaque</code>", then return <var>response</var>.
+   <li><p>If <var>compressionDictionaryCache</var> is null, then return <var>response</var>.
+
+   <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a>
+   `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s
+   <a for=response>header list</a>.
+
+   <li><p>If <var>request</var>'s <a for=request>response tainting</a> is "<code>opaque</code>" and
+   <var>corpPolicy</var> is not `<code>cross-origin</code>`, then return <var>response</var>.
 
    <li><p>Let <var>expirationTime</var> be the time at which the <var>response</var> becomes stale.
 
@@ -6573,7 +6579,12 @@ given a <a for=/>fetch params</a> <var>fetchParams</var>, an optional boolean
  <li><p>If <var>codings</var> is null or does not contain `<code>dcb</code>` or `<code>dcz</code>`,
  then return <var>response</var>.
 
- <li><p>If <var>response</var>'s <a for=response>type</a> is "<code>opaque</code>", then return a
+ <li><p>Let <var>corpPolicy</var> be the result of <a for="header list">getting</a>
+ `<a http-header><code>Cross-Origin-Resource-Policy</code></a>` from <var>response</var>'s
+ <a for=response>header list</a>.
+
+ <li><p>If <var>response</var>'s <a for=response>type</a> is "<code>opaque</code>" and
+ <var>corpPolicy</var> is not `<code>cross-origin</code>`, then return a
  <a>network error</a>.
 
  <li><p>Let <var>availableDictionaryHash</var> be the result of