diff --git a/5-network/05-fetch-crossorigin/article.md b/5-network/05-fetch-crossorigin/article.md index 36c57aed..31fb0b8b 100644 --- a/5-network/05-fetch-crossorigin/article.md +++ b/5-network/05-fetch-crossorigin/article.md @@ -329,7 +329,7 @@ fetch('http://another.com', { }); ``` -Now `fetch` sends cookies originating from `another.com` without request to that site. +Now `fetch` sends cookies originating from `another.com` with request to that site. If the server agrees to accept the request *with credentials*, it should add a header `Access-Control-Allow-Credentials: true` to the response, in addition to `Access-Control-Allow-Origin`.